CVE-2025-1198
CVE-2025-1198
Título es
CVE-2025-1198
Jue, 13/02/2025 – 02:15
Tipo
CWE-613
Gravedad 2.0 Txt
Pendiente de análisis
Título en
CVE-2025-1198
Descripción en
An issue discovered in GitLab CE/EE affecting all versions from 16.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 meant that long-lived connections in ActionCable potentially allowed revoked Personal Access Tokens access to streaming results.
13/02/2025
13/02/2025
Vector CVSS:3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Gravedad 3.1 (CVSS 3.1 Base Score)
4.20
Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
MEDIUM
Enviar en el boletín
Off
