CVE-2020-13286
For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server Side Request Forgery.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server Side Request Forgery.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"12.7.0"},{"fixed":"13.0.12"},{"introduced":"13.1.0"},{"fixed":"13.1.6"},{"introduced":"13.2.0"},{"fixed":"13.2.3"}]}]
Références
- advisory gitlab.com
- report gitlab.com
- report hackerone.com
- web nvd.nist.gov