CVE-2020-10081

Опубликовано: 13 мар. 2020

Источник: debian

Описание

GitLab before 12.8.2 has Incorrect Access Control. It was internally discovered that the LFS import process could potentially be used to incorrectly access LFS objects not owned by the user.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
gitlab	fixed	12.6.8-1	experimental	package
gitlab	fixed	12.6.8-3		package

Примечания

https://about.gitlab.com/releases/2020/03/04/gitlab-12-dot-8-dot-2-released/

Связанные уязвимости

CVE-2020-10081

CVSS3: 6.5

ubuntu

около 6 лет назад

GitLab before 12.8.2 has Incorrect Access Control. It was internally discovered that the LFS import process could potentially be used to incorrectly access LFS objects not owned by the user.

CVE-2020-10081

CVSS3: 6.5

nvd

около 6 лет назад

GitLab before 12.8.2 has Incorrect Access Control. It was internally discovered that the LFS import process could potentially be used to incorrectly access LFS objects not owned by the user.

GHSA-2jcr-4r89-72r6

github

почти 4 года назад

GitLab before 12.8.2 has Incorrect Access Control. It was internally discovered that the LFS import process could potentially be used to incorrectly access LFS objects not owned by the user.