CVE-2020-13290
In GitLab before 13.0.12, 13.1.6, and 13.2.3, improper access control was used on the Applications page
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
In GitLab before 13.0.12, 13.1.6, and 13.2.3, improper access control was used on the Applications page
影響パッケージ
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"8.4.0"},{"fixed":"13.0.12"},{"introduced":"13.1.0"},{"fixed":"13.1.6"},{"introduced":"13.2.0"},{"fixed":"13.2.3"}]}]
参照URL
- advisory gitlab.com
- advisory hackerone.com
- web gitlab.com
- web nvd.nist.gov