CVE-2020-35236

🗓️ 14 Dec 2020 05:10:15Reported by [email protected]Type

GitLab Webhook Handler in amazee.io Lagoon 1.12.3 has incorrect access control for project deletio

Reporter	Title	Published	Views	Family All 4
Prion	Arbitrary file deletion	14 Dec 202005:15	–	prion
OSV	CVE-2020-35236	14 Dec 202005:15	–	osv
CVE	CVE-2020-35236	14 Dec 202005:15	–	cve
Cvelist	CVE-2020-35236	14 Dec 202004:44	–	cvelist

Nvd

Node

amazee lagoonRange<1.12.3

Source	Link
github	www.github.com/amazeeio/lagoon/tree/master/services/webhook-handler
github	www.github.com/amazeeio/lagoon/commit/1140289bf9fa98b8602ab4662ae867b210d8476b
github	www.github.com/amazeeio/lagoon/compare/v1.12.2...v1.12.3
github	www.github.com/amazeeio/lagoon/tree/master/services/webhooks2tasks

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Dec 2020 05:15Current

5.2Medium risk

Vulners AI Score5.2

CVSS25

CVSS35.3

EPSS0.001