Loading HuntDB...

GHSA-294h-9fqc-xfq7

GitHub Security Advisory

⚠ Unreviewed MODERATE Has CVE

Advisory Details

Improper access control in the runner jobs API in GitLab CE/EE affecting all versions prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows a previous maintainer of a project with a specific runner to access job and project meta data under certain conditions

Related CVEs

Key Information

GHSA ID
GHSA-294h-9fqc-xfq7
Published
July 2, 2022 12:00 AM
Last Modified
July 9, 2022 12:00 AM
CVSS Score
5.0 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: June 16, 2025 6:25 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.