CVE-2020-12275
GitLab 12.6 through 12.9 is vulnerable to a privilege escalation that allows an external user to create a personal snippet through the API.
Original description
The description as published by the source.
GitLab 12.6 through 12.9 is vulnerable to a privilege escalation that allows an external user to create a personal snippet through the API.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"12.6.0"},{"fixed":"12.7.8"},{"introduced":"12.8.0"},{"fixed":"12.8.8"},{"introduced":"12.9.0"},{"fixed":"12.9.1"}]}]
References
- advisory about.gitlab.com
- web nvd.nist.gov