Note:
This project will be discontinued after December 13, 2021. [more]
2019-05-17
An Incorrect Access Control issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The GitLab API allowed project Maintainers and Owners to view the trigger tokens of other project users.
| Products | Gitlab |
| Type | Improper Access Control (CWE-284) |
| First patch | - None (likely due to unavailable code) |
| Links |
• https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/
• https://about.gitlab.com/blog/categories/releases/ |