CVE-2020-12275
GitLab 12.6 through 12.9 is vulnerable to a privilege escalation that allows an external user to create a personal snippet through the API.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
GitLab 12.6 through 12.9 is vulnerable to a privilege escalation that allows an external user to create a personal snippet through the API.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"12.6.0"},{"fixed":"12.7.8"},{"introduced":"12.8.0"},{"fixed":"12.8.8"},{"introduced":"12.9.0"},{"fixed":"12.9.1"}]}]
Références
- advisory about.gitlab.com
- web nvd.nist.gov