CVE-2020-26412
Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics starting in GitLab EE 13.2 before...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics starting in GitLab EE 13.2 before 13.6.2.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"13.2.0"},{"fixed":"13.4.7"},{"introduced":"13.5.0"},{"fixed":"13.5.5"},{"introduced":"13.6.0"},{"fixed":"13.6.2"}]}]
Références
- advisory gitlab.com
- report gitlab.com
- web nvd.nist.gov