CVE-2019-5462
A privilege escalation issue was discovered in GitLab CE/EE 9.0 and later when trigger tokens are not rotated once ownership of them has changed.
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A privilege escalation issue was discovered in GitLab CE/EE 9.0 and later when trigger tokens are not rotated once ownership of them has changed.
参照URL
- patch about.gitlab.com
- report hackerone.com
- report gitlab.com