CVE-2021-39898
In all versions of GitLab CE/EE since version 10.6, a project export leaks the external webhook token value which may allow access to the project whic...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In all versions of GitLab CE/EE since version 10.6, a project export leaks the external webhook token value which may allow access to the project which it was exported from.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"10.6.0"},{"fixed":"14.1.7"},{"introduced":"14.2.0"},{"fixed":"14.2.5"},{"introduced":"14.3.0"},{"fixed":"14.3.1"}]}]
Références
- advisory gitlab.com
- report gitlab.com
- report hackerone.com
- web nvd.nist.gov