CVE-2024-0861
Direct Request ('Forced Browsing') in GitLab
概要
Direct Request ('Forced Browsing') in GitLab
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An issue has been discovered in GitLab EE affecting all versions starting from 16.4 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. Users with the Guest role can change Custom dashboard projects settings contrary to permissions.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- package git://git@gitlab.com:gitlab-org/gitlab.git
- report gitlab.com
- report hackerone.com