CVE-2024-12431
Missing Authorization in GitLab
Résumé
Missing Authorization in GitLab
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue was discovered in GitLab CE/EE affecting all versions starting from 15.5 before 17.5.5, 17.6 before 17.6.3, and 17.7 before 17.7.1, in which unauthorized users could manipulate the status of issues in public projects.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"15.5.0"},{"fixed":"17.5.5"},{"introduced":"17.6.0"},{"fixed":"17.6.3"},{"introduced":"17.7.0"},{"fixed":"17.7.1"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- package git://git@gitlab.com:gitlab-org/gitlab.git
- report gitlab.com
- report hackerone.com
- web about.gitlab.com