Improper access control

2019-12-1821:15:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.5%

JSON

An improper access control vulnerability exists in GitLab <12.3.3 that allows an attacker to obtain container and dependency scanning reports through the merge request widget even though public pipelines were disabled.

CPENameOperatorVersion
gitlablt12.3.3
gitlablt12.3.3

CPE	Name	Operator	Version
	gitlab	lt	12.3.3
	gitlab	lt	12.3.3

References

hackerone.com/reports/676976