PT-2020-9317
CVE-2019-12431
·
تاريخ النشر
2020-03-10
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
GitLab Community and Enterprise Edition versions 8.13 through 11.11
Description:
An issue was discovered that allows restricted users to access the metadata of private milestones through the Search API, which is an example of Improper Access Control.
Recommendations:
For GitLab Community and Enterprise Edition versions 8.13 through 11.11, consider restricting access to the Search API until a patch is available.
As a temporary workaround, limit the visibility of private milestones to prevent unauthorized access.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾