medium5.3
CVE-2020-15525
GitLab EE 11.3 through 13.1.2 has Incorrect Access Control because of the Maven package upload endpoint.
Impact
GitLab EE 11.3 through 13.1.2 has Incorrect Access Control because of the Maven package upload endpoint.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitlab | Gitlab | from 11.3.0 through 13.1.2 |
References
- NVD record
- CVE.org record
- https://about.gitlab.com/releases/2020/07/06/critical-security-release-gitlab-13-1-3-released/
- https://about.gitlab.com/releases/categories/releases/
- https://gitlab.com/gitlab-org/gitlab/-/issues/225259
- https://about.gitlab.com/releases/2020/07/06/critical-security-release-gitlab-13-1-3-released/
- https://about.gitlab.com/releases/categories/releases/
- https://gitlab.com/gitlab-org/gitlab/-/issues/225259