CVE-2019-15592
GitLab 12.2.2 and below contains a security vulnerability that allows a guest user in a private project to see the merge request ID associated to an i...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
GitLab 12.2.2 and below contains a security vulnerability that allows a guest user in a private project to see the merge request ID associated to an issue via the activity timeline.
参照URL
- advisory about.gitlab.com
- report hackerone.com