CVE-2014-8540

EPSS 0.32%
Published 05.01.2018 16:29:00
Last modified 21.11.2024 02:19:17
Source cve@mitre.org
Teams watchlist Login
Open Login

The groups API in GitLab 6.x and 7.x before 7.4.3 allows remote authenticated guest users to modify ownership of arbitrary groups by leveraging improper permission checks.

Affected products Warnungen 0 Metrics 3 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

Gitlab ≫ Gitlab Version >= 6.0.0 <= 6.9.2

Gitlab ≫ Gitlab Version >= 7.0.0 < 7.4.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.32%	0.522

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.5	2.8	3.6	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
nvd@nist.gov	4	8	2.9	AV:N/AC:L/Au:S/C:N/I:P/A:N

http://www.openwall.com/lists/oss-security/2014/10/31/2

Third Party Advisory

Mailing List

http://www.securityfocus.com/bid/70841

Third Party Advisory

VDB Entry

https://about.gitlab.com/2014/10/30/gitlab-7-4-3-released/

Patch

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/98449

Third Party Advisory

VDB Entry

https://gitlab.com/gitlab-org/gitlab-ce/commit/a2dfff418bf2532ebb5aee88414107929b17eefd

Patch

https://nvd.nist.gov/vuln/detail/CVE-2014-8540

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-8540

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-8540

EUVD