CVE-2022-1417
Improper access control in GitLab CE/EE affecting all versions starting from 8.12 before 14.8.6, all versions starting from 14.9 before 14.9.4, and al...
Original description
The description as published by the source.
Improper access control in GitLab CE/EE affecting all versions starting from 8.12 before 14.8.6, all versions starting from 14.9 before 14.9.4, and all versions starting from 14.10 before 14.10.1 allows non-project members to access contents of Project Members-only Wikis via malicious CI jobs
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"8.12.0"},{"fixed":"14.8.6"},{"introduced":"14.9.0"},{"fixed":"14.9.4"},{"introduced":"14.10.0"},{"fixed":"14.10.1"}]}]
References
- advisory gitlab.com
- advisory hackerone.com
- web gitlab.com
- web nvd.nist.gov