Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab
Vulnerability Description
An issue has been discovered in GitLab CE/EE affecting all versions from 15.1 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to view administrator-only maintenance notes by accessing runner details through specific interfaces.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
将系统数据暴露到未授权控制的范围
Vulnerability Title
GitLab CE和EE 安全漏洞
Vulnerability Description
GitLab Enterprise Edition(EE)和GitLab Community Edition(CE)都是美国GitLab公司的产品。GitLab Enterprise Edition是一套内容管理系统。GitLab Community Edition是一种社区版 GitLab 。 GitLab CE和EE 15.1版本至18.1.6之前版本、18.2版本至18.2.6之前版本和18.3版本至18.3.2之前版本存在安全漏洞,该漏洞源于通过特定接口访问运行器详情,可能导致经过身份验证的用户查
CVSS Information
N/A
Vulnerability Type
N/A