CVE-2021-39900
Information disclosure from SendEntry in GitLab starting with 10.8 allowed exposure of full URL of artifacts stored in object-storage with a temporary...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Information disclosure from SendEntry in GitLab starting with 10.8 allowed exposure of full URL of artifacts stored in object-storage with a temporary availability via Rails logs.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"10.8.0"},{"fixed":"14.1.7"},{"introduced":"14.2.0"},{"fixed":"14.2.5"},{"introduced":"14.3.0"},{"fixed":"14.3.1"}]}]
Références
- advisory gitlab.com
- report gitlab.com
- web nvd.nist.gov