CVE-2019-5474

An authorization issue was discovered in GitLab EE < 12.1.2, < 12.0.4, and < 11.11.6 allowing the merge request approval rules to be overridden withou...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

An authorization issue was discovered in GitLab EE < 12.1.2, < 12.0.4, and < 11.11.6 allowing the merge request approval rules to be overridden without appropriate permissions.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

参照URL

patch about.gitlab.com
report hackerone.com
report gitlab.com