CVE-2019-5469
An IDOR vulnerability exists in GitLab
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An IDOR vulnerability exists in GitLab <v12.1.2, <v12.0.4, and <v11.11.6 that allowed uploading files from project archive to replace other users files potentially allowing an attacker to replace project binaries or other uploaded assets.
参照URL
- report hackerone.com
- report gitlab.com