Vaib25Vicky

An issue has been discovered in GitLab EE, affecting the authorization procedure. This issue allows an attacker to run pipeline jobs as an arbitrary user via scheduled security scan policies. The exploitation of this issue may enable a remote attacker to launch tasks in the name of any user.

The issue could allow a user to unmask the Discord Webhook URL through viewing the raw API response.

An issue has been discovered in GitLab EE. If a group with SAML SSO enabled is transferred to a new namespace as a child group, it's possible that a previously removed malicious maintainer or owner of the child group can still gain access to the group via SSO or a SCIM token to perform actions on the group.

An issue has been discovered that may allow access to a private project through an email invite by using another user's email address as an unverified secondary email.

The issue is related to pipeline subscriptions in GitLab EE, where new pipelines are triggered with the person who created the tag as the pipeline creator instead of the subscription's author.

The issue is related to improper access control in the runner jobs API, allowing a previous maintainer of a project with a specific runner to access job and project meta data under certain conditions.

The issue is related to improper access control in GitLab CE/EE, allowing an attacker with a deploy token to access a project's disabled wiki.

The issue is related to a lack of email address ownership verification in the CODEOWNERS feature. This allows an attacker to bypass the CODEOWNERS Merge Request approval requirement under rare circumstances.

The issue is related to improper authorization in the vulnerability report feature, allowing a reporter to access vulnerability data. This could potentially lead to unauthorized access to confidential data. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited.

The issue is related to improper authorization, allowing a user who previously had necessary access to trigger deployments to protected environments under specific conditions, even after their access has been removed. This can lead to data integrity issues and potentially cause a denial of service.

An issue has been discovered that allowed a project member with limited permissions to view the project security dashboard.