CVE-2017-0882

Multiple versions of GitLab expose sensitive user credentials when assigning a user to an issue or merge request. A fix was included in versions 8.15.8, 8.16.7, and 8.17.4, which were released on March 20th 2017 at 23:59 UTC...

CVE-2017-0882

This CVE (CVE-2017-0882) affects GitLab where, prior to fixes, the serializing of the user object during assignment to issues or merge requests could disclose sensitive credentials. The published fix targets GitLab versions 8.15.8, 8.16.7, and 8.17.4, released on 2017-03-20 23:59 UTC, addressing ...

CVE-2017-0882

Removed by vendor...

GitLab permission leak Vulnerability, CVE-2017-0882）

Information Disclosure in Issue and Merge Request Trackers During an internal code review a critical vulnerability in the GitLab Issue and Merge Request trackers was discovered. This vulnerability could allow a user with access to assign ownership of an issue or merge request to another user to...