CVE-2020-13300

GitLab CE/EE version 13.3 prior to 13.3.4 was vulnerable to an OAuth authorization scope change without user consent in the middle of the authorizatio...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

GitLab CE/EE version 13.3 prior to 13.3.4 was vulnerable to an OAuth authorization scope change without user consent in the middle of the authorization flow.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami gitlab

[{"type":"SEMVER","events":[{"introduced":"13.3.0"},{"fixed":"13.3.4"}]}]

Références

advisory gitlab.com
advisory hackerone.com
web gitlab.com
web nvd.nist.gov