Non notée
CVE-2019-15581 An IDOR exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) that…
Description
An IDOR exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) that allowed a project owner or maintainer to see the members of any private group via merge request approval rules.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| GitLab EE | Versions non publiées |
Références
- about.gitlab.com about.gitlab.com
- hackerone.com hackerone.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de GitLab EE
Les 10 CVE de GitLab EE →
CVE-2021-22240
Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on…
4.2
Moyenne
CVE-2020-26412
Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics…
3.1
Faible
CVE-2020-26416
Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms…
4.0
Moyenne
CVE-2020-13349
An issue has been discovered in GitLab EE affecting all versions starting from 8.12
4.3
Moyenne