CVE-2020-13282
For GitLab before 13.0.12, 13.1.6, 13.2.3 after a group transfer occurs, members from a parent group keep their access level on the subgroup leading t...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
For GitLab before 13.0.12, 13.1.6, 13.2.3 after a group transfer occurs, members from a parent group keep their access level on the subgroup leading to improper access.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"10.5.0"},{"fixed":"13.0.12"},{"introduced":"13.1.0"},{"fixed":"13.1.6"},{"introduced":"13.2.0"},{"fixed":"13.2.3"}]}]
Références
- advisory gitlab.com
- advisory hackerone.com
- web gitlab.com
- web nvd.nist.gov