CVE-2020-10081

GitLab before 12.8.2 has Incorrect Access Control. It was internally discovered that the LFS import process could potentially be used to incorrectly a...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

GitLab before 12.8.2 has Incorrect Access Control. It was internally discovered that the LFS import process could potentially be used to incorrectly access LFS objects not owned by the user.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

影響パッケージ

Bitnami gitlab

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"12.8.2"}]}]

参照URL

advisory about.gitlab.com
advisory about.gitlab.com
web nvd.nist.gov