CVE-2020-13263
An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allow unauthor...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allow unauthorized users to impersonate as a maintainer to perform limited actions.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"9.5.0"},{"fixed":"12.9.8"},{"introduced":"12.10.0"},{"fixed":"12.10.7"},{"introduced":"13.0.0"},{"fixed":"13.0.1"}]}]
Références
- advisory gitlab.com
- report gitlab.com
- report hackerone.com
- web nvd.nist.gov