CVE-2017-0920

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass issue in the Projects::MergeRequests::CreationsController component resulting in an attacker to see every project name and their respective namespace on a GitLab instance...

PT-2018-5147

Name of the Vulnerable Software and Affected Versions Gitlab versions prior to 10.1.6 Gitlab versions prior to 10.2.6 Gitlab versions prior to 10.3.4 Description The issue is related to an authorization bypass problem in the Projects::MergeRequests::CreationsController component. This results in ...

CVE-2017-0920: Authorization Bypass Through User-Controlled Key

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass issue in the Projects::MergeRequests::CreationsController component resulting in an attacker to see every project name and their respective namespace on a GitLab instance...