CVE-2024-1250
Privilege Chaining in GitLab
概要
Privilege Chaining in GitLab
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An issue has been discovered in GitLab EE affecting all versions starting from 16.8 before 16.8.2. When a user is assigned a custom role with manage_group_access_tokens permission, they may be able to create group access tokens with Owner privileges, which may lead to privilege escalation.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- package git://git@gitlab.com:gitlab-org/gitlab.git
- report gitlab.com