CVE-2020-15525
GitLab EE 11.3 through 13.1.2 has Incorrect Access Control because of the Maven package upload endpoint.
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
GitLab EE 11.3 through 13.1.2 has Incorrect Access Control because of the Maven package upload endpoint.
影響パッケージ
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"11.3.0"},{"fixed":"13.1.3"}]}]
参照URL
- advisory about.gitlab.com
- advisory about.gitlab.com
- web gitlab.com
- web nvd.nist.gov