CVE-2017-0922

EPSS 1.4%CWE-639

Gitlab Enterprise Edition version 10.3 is vulnerable to an authorization bypass issue in the GitLab Projects::BoardsController component resulting in an information disclosure on any board object.

Produtos afetados

GitLab · GitLab Community and Enterprise Editions

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/https://hackerone.com/reports/301123