CVE-2021-22250

Improper authorization in GitLab CE/EE affecting all versions since 13.3 allowed users to view and delete impersonation tokens that administrators cre...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Improper authorization in GitLab CE/EE affecting all versions since 13.3 allowed users to view and delete impersonation tokens that administrators created for their account

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami gitlab

[{"type":"SEMVER","events":[{"introduced":"13.3.0"},{"fixed":"13.12.9"},{"introduced":"14.0.0"},{"fixed":"14.0.7"},{"introduced":"14.1.0"},{"fixed":"14.1.2"}]}]

Références

advisory gitlab.com
report gitlab.com
report hackerone.com
web nvd.nist.gov