CVE-2019-5466
An IDOR was discovered in GitLab CE/EE 11.5 and later that allowed new merge requests endpoint to disclose label names.
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An IDOR was discovered in GitLab CE/EE 11.5 and later that allowed new merge requests endpoint to disclose label names.
参照URL
- patch about.gitlab.com
- report hackerone.com
- report gitlab.com