CVE-2020-13266
Insecure authorization in Project Deploy Keys in GitLab CE/EE 12.8 and later through 13.0.1 allows users to update permissions of other users' deploy...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Insecure authorization in Project Deploy Keys in GitLab CE/EE 12.8 and later through 13.0.1 allows users to update permissions of other users' deploy keys under certain conditions
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"12.8.0"},{"fixed":"12.9.8"},{"introduced":"12.10.0"},{"fixed":"12.10.7"},{"introduced":"13.0.0"},{"fixed":"13.0.1"}]}]
Références
- advisory gitlab.com
- report gitlab.com
- web nvd.nist.gov