CVE-2020-15525
GitLab EE 11.3 through 13.1.2 has Incorrect Access Control because of the Maven package upload endpoint.
Original description
The description as published by the source.
GitLab EE 11.3 through 13.1.2 has Incorrect Access Control because of the Maven package upload endpoint.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"11.3.0"},{"fixed":"13.1.3"}]}]
References
- advisory about.gitlab.com
- advisory about.gitlab.com
- report gitlab.com
- web nvd.nist.gov