CVE-2021-22258
The project import/export feature in GitLab 8.9 and greater could be used to obtain otherwise private email addresses
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The project import/export feature in GitLab 8.9 and greater could be used to obtain otherwise private email addresses
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"8.9.0"},{"fixed":"14.0.9"},{"introduced":"14.1.0"},{"fixed":"14.1.4"},{"introduced":"14.2.0"},{"fixed":"14.2.2"}]}]
Références
- advisory gitlab.com
- report gitlab.com
- report hackerone.com
- web nvd.nist.gov