NetSight
IP …
medium5.9

CVE-2020-13334

In GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, improper authorization checks allow a non-member of a project/group to change the confidentiality attri…

Impact

In GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, improper authorization checks allow a non-member of a project/group to change the confidentiality attribute of issue via mutation GraphQL query

Affected products

VendorProductAffected versions
GitlabGitlab
from 8.6.0 before 13.2.10
from 13.3.0 before 13.3.7
from 13.4.0 before 13.4.2

Weakness classification

CWE-863

References