CVE-2016-9469
CVE-2016-9469 affects GitLab 8.13.x and 8.14.x before patches. The root cause is a dangerous method exposure via a public_send-based finder call (IssuableFinder) that allows an authenticated user to delete issues/MR objects; in public-project scenarios, unauthenticated access could be possible. F...