PT-2023-13420
CVE-2022-3482
·
تاريخ النشر
2023-01-24
·
تاريخ التحديث
2024-03-06
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
GitLab CE/EE versions 11.3 through 15.3.4
GitLab CE/EE versions 15.4 through 15.4.3
GitLab CE/EE versions 15.5 through 15.5.1
Description
An issue with access control in GitLab CE/EE allowed unauthorized users to view release names, even when releases were restricted to project members only.
Recommendations
For GitLab CE/EE versions 11.3 through 15.3.4, update to version 15.3.5 or later.
For GitLab CE/EE versions 15.4 through 15.4.3, update to version 15.4.4 or later.
For GitLab CE/EE versions 15.5 through 15.5.1, update to version 15.5.2 or later.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾