CVE-2022-1417

Improper access control in GitLab CE/EE affecting all versions starting from 8.12 before 14.8.6, all versions starting from 14.9 before 14.9.4, and al...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Improper access control in GitLab CE/EE affecting all versions starting from 8.12 before 14.8.6, all versions starting from 14.9 before 14.9.4, and all versions starting from 14.10 before 14.10.1 allows non-project members to access contents of Project Members-only Wikis via malicious CI jobs

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

影響パッケージ

Bitnami gitlab

[{"type":"SEMVER","events":[{"introduced":"8.12.0"},{"fixed":"14.8.6"},{"introduced":"14.9.0"},{"fixed":"14.9.4"},{"introduced":"14.10.0"},{"fixed":"14.10.1"}]}]

参照URL

advisory gitlab.com
advisory hackerone.com
web gitlab.com
web nvd.nist.gov