CVE-2016-9469

Multiple versions of GitLab expose a dangerous method to any authenticated user that could lead to the deletion of all Issue and MergeRequest objects on a GitLab instance. For GitLab instances with publicly available projects this vulnerability could be exploited by an unauthenticated user. A fix...

CVE-2016-9469

Removed by vendor...

CVE-2016-9469

CVE-2016-9469 affects GitLab 8.13.x and 8.14.x before patches. The root cause is a dangerous method exposure via a public_send-based finder call (IssuableFinder) that allows an authenticated user to delete issues/MR objects; in public-project scenarios, unauthenticated access could be possible. F...