CVE-2017-0922
Gitlab Enterprise Edition version 10.3 is vulnerable to an authorization bypass issue in the GitLab Projects::BoardsController component resulting in...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Gitlab Enterprise Edition version 10.3 is vulnerable to an authorization bypass issue in the GitLab Projects::BoardsController component resulting in an information disclosure on any board object.
参照URL
- advisory about.gitlab.com
- report hackerone.com