Non notée
CVE-2019-5474 An authorization issue was discovered in GitLab EE < 12.1.2, < 12.0.4, and < 11.11.6 allowing the merge request approval…
Description
An authorization issue was discovered in GitLab EE < 12.1.2, < 12.0.4, and < 11.11.6 allowing the merge request approval rules to be overridden without appropriate permissions.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| GitLab EE | Versions non publiées |
Références
- about.gitlab.com about.gitlab.com
- hackerone.com hackerone.com
- gitlab.com gitlab.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de GitLab EE
Les 10 CVE de GitLab EE →
CVE-2021-22240
Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on…
4.2
Moyenne
CVE-2020-26412
Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics…
3.1
Faible
CVE-2020-26416
Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms…
4.0
Moyenne
CVE-2020-13349
An issue has been discovered in GitLab EE affecting all versions starting from 8.12
4.3
Moyenne