GitLab 授权问题漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. GitLab Community Edition and GitLab Enterprise Edition have an authorization issue...

CVE-2020-13322

A vulnerability was discovered in GitLab versions after 12.9. Due to improper verification of permissions, an unauthorized user can create and delete deploy tokens...

CVE-2020-13322

A vulnerability was discovered in GitLab versions after 12.9. Due to improper verification of permissions, an unauthorized user can create and delete deploy tokens...

CVE-2020-13296

An issue has been discovered in GitLab affecting versions =10.7 =13.1.0 =13.2.0 13.2.6. Improper Access Control for Deploy Tokens...

Input validation

A vulnerability was discovered in GitLab versions after 12.9. Due to improper verification of permissions, an unauthorized user can create and delete deploy tokens...

Improper access control

An issue has been discovered in GitLab affecting versions =10.7 =13.1.0 =13.2.0 13.2.6. Improper Access Control for Deploy Tokens...

UBUNTU-CVE-2020-13296

An issue has been discovered in GitLab affecting versions =10.7 =13.1.0 =13.2.0 13.2.6. Improper Access Control for Deploy Tokens...

UBUNTU-CVE-2020-13322

A vulnerability was discovered in GitLab versions after 12.9. Due to improper verification of permissions, an unauthorized user can create and delete deploy tokens...

CVE-2020-13322

A vulnerability was discovered in GitLab versions after 12.9. Due to improper verification of permissions, an unauthorized user can create and delete deploy tokens...

CVE-2020-13322

A vulnerability was discovered in GitLab versions after 12.9. Due to improper verification of permissions, an unauthorized user can create and delete deploy tokens...

CVE-2020-13322

Removed by vendor...

CVE-2020-13322

Affected software: GitLab versions after 12.9. Vulnerability: Improper verification of permissions allows an unauthorized user to create and delete deploy tokens. The root cause is permission verification weakness in token management, enabling manipulation of deploy tokens by unauthenticated/insu...

PT-2020-13437 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 10.7 through 13.0.13 GitLab versions 13.1.0 through 13.1.7 GitLab versions 13.2.0 through 13.2.5 Description: An issue has been discovered in GitLab related to Improper Access Control for Deploy Tokens. Recommendations: For...

PT-2020-13463 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions after 12.9 Description: A vulnerability was discovered due to improper verification of permissions. This issue allows an unauthorized user to create and delete deploy tokens. Recommendations: For GitLab versions after 12.9,...