Missing Authorization in GitLab
28Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendcvss 5.3epss 4.9%
da publicação à arma0 dias
Publicada no NVD26 de jan.
metasploit25 de jan.
probabilidade de exploração
4.9%top 9% das CVEs
exploração observada
nãonenhuma fonte reporta
An issue has been discovered in GitLab affecting all versions before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. It was possible to read the user email address via tags feed although the visibility in the user profile has been disabled.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
GitLab · GitLab