CVE-2020-10955

GitLab EE/CE 11.1 through 12.9 is vulnerable to parameter tampering on an upload feature that allows an unauthorized user to read content available un...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

GitLab EE/CE 11.1 through 12.9 is vulnerable to parameter tampering on an upload feature that allows an unauthorized user to read content available under specific folders.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami gitlab

[{"type":"SEMVER","events":[{"introduced":"11.1.0"},{"fixed":"12.9.1"}]}]

Références

advisory about.gitlab.com
advisory about.gitlab.com
advisory debian.org
web nvd.nist.gov