CVE-2021-22172
Improper authorization in GitLab 12.8+ allows a guest user in a private project to view tag data that should be inaccessible on the releases page
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Improper authorization in GitLab 12.8+ allows a guest user in a private project to view tag data that should be inaccessible on the releases page
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"12.8.0"},{"fixed":"13.6.6"},{"introduced":"13.7.0"},{"fixed":"13.7.6"},{"introduced":"13.8.0"},{"fixed":"13.8.2"}]}]
Références
- advisory gitlab.com
- patch gitlab.com
- report hackerone.com
- web nvd.nist.gov