CVE-2020-13272
OAuth flow missing verification checks CE/EE 12.3 and later through 13.0.1 allows unverified user to use OAuth authorization code flow
Description d'origine
La description telle que publiée par la source (souvent en anglais).
OAuth flow missing verification checks CE/EE 12.3 and later through 13.0.1 allows unverified user to use OAuth authorization code flow
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"12.3.0"},{"fixed":"12.9.8"},{"introduced":"12.10.0"},{"fixed":"12.10.7"},{"introduced":"13.0.0"},{"fixed":"13.0.1"}]}]
Références
- advisory gitlab.com
- report gitlab.com
- report hackerone.com
- web nvd.nist.gov