Note:
This project will be discontinued after December 13, 2021. [more]
2020-02-14
GitLab 11.8 and later contains a security vulnerability that allows a user to obtain details of restricted pipelines via the merge request endpoint.
Products | Gitlab |
Type | ? (NVD-CWE-noinfo) |
First patch | - None (likely due to unavailable code) |
Links |
• https://hackerone.com/reports/507064
• https://about.gitlab.com/releases/2019/07/29/security-release-gitlab-12-dot-1-dot-2-released/ |