Non notée
CVE-2017-0920 GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass…
Description
GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass issue in the Projects::MergeRequests::CreationsController component resulting in an attacker to see every project name and their respective namespace on a GitLab instance.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| GitLab Community and Enterprise Editions | Versions non publiées |
Références
- hackerone.com hackerone.com
- DSA-4206 www.debian.org
- about.gitlab.com about.gitlab.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de GitLab Community and Enterprise Editions
Les 13 CVE de GitLab Community and Enterprise Editions →
CVE-2017-0917
Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the CI job component resulting in…
Non notée
CVE-2017-0916
Gitlab Community Edition version 10.3 is vulnerable to a lack of input validation in the system_hook_push queue…
Non notée
CVE-2017-0927
Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys…
Non notée
CVE-2017-0926
Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the Oauth sign-in component…
Non notée