CVE-2022-1406
Improper input validation in GitLab CE/EE affecting all versions from 8.12 prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0 allo...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Improper input validation in GitLab CE/EE affecting all versions from 8.12 prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0 allows a Developer to read protected Group or Project CI/CD variables by importing a malicious project
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"8.12.0"},{"fixed":"14.8.6"},{"introduced":"14.9.0"},{"fixed":"14.9.4"},{"introduced":"14.10.0"},{"fixed":"14.10.1"}]}]
Références
- advisory gitlab.com
- advisory hackerone.com
- web gitlab.com
- web nvd.nist.gov