CVE-2020-13263

An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allow unauthor...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allow unauthorized users to impersonate as a maintainer to perform limited actions.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

影響パッケージ

Bitnami gitlab

[{"type":"SEMVER","events":[{"introduced":"9.5.0"},{"fixed":"12.9.8"},{"introduced":"12.10.0"},{"fixed":"12.10.7"},{"introduced":"13.0.0"},{"fixed":"13.0.1"}]}]

参照URL

advisory gitlab.com
report gitlab.com
report hackerone.com
web nvd.nist.gov