CVE-2021-39866
A business logic error in the project deletion process in GitLab 13.6 and later allows persistent access via project access tokens.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A business logic error in the project deletion process in GitLab 13.6 and later allows persistent access via project access tokens.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"13.6.0"},{"fixed":"14.1.7"},{"introduced":"14.2.0"},{"fixed":"14.2.5"},{"introduced":"14.3.0"},{"fixed":"14.3.1"}]}]
Références
- advisory gitlab.com
- report gitlab.com
- report hackerone.com
- web nvd.nist.gov