Lucene search

K
githubexploitFBD2C210-3BB9-5795-B337-F1CB506BDBBC
HistoryJan 23, 2024 - 7:11 p.m.

Exploit for Improper Access Control in Gitlab

2024-01-2319:11:11
122
gitlab
account takeover
vulnerable versions
csrf
authenticity_token
reset password
exploit

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

9 High

AI Score

Confidence

High

0.96 High

EPSS

Percentile

99.5%

Giới thiệu

  • GitLab là trình quản lý kho dữ liệu lưu trữ …

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

9 High

AI Score

Confidence

High

0.96 High

EPSS

Percentile

99.5%