Beveiligingsadvies

CVE-2018-17455

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-04-15 00:00:00

Laatst bijgewerkt 2025-02-06 20:18:51

Toegewezen door mitre

CVSS-score 7.5

Status PUBLISHED

Beschrijving

An issue was discovered in GitLab Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Attackers could obtain sensitive information about group names, avatars, LDAP settings, and descriptions via an insecure direct object reference to the "merge request approvals" feature.

← Alle CVE's bekijken Bekijk op cve.org ↗