CVE-2020-13275
A user with an unverified email address could request an access to domain restricted groups in GitLab EE 12.2 and later through 13.0.1
Original description
The description as published by the source.
A user with an unverified email address could request an access to domain restricted groups in GitLab EE 12.2 and later through 13.0.1
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"12.2.0"},{"fixed":"12.9.8"},{"introduced":"12.10.0"},{"fixed":"12.10.7"},{"introduced":"13.0.0"},{"fixed":"13.0.1"}]}]
References
- advisory gitlab.com
- web gitlab.com
- web hackerone.com
- web nvd.nist.gov