EUVD-2021-26242

Malware in sbrugna...

Information Disclosure

gitlab is vulnerable to Information Disclosure. The vulnerability exists due to improper permissions rules allowing an attacker to read confidential Epic references...

PT-2021-22732 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 10.6 through 14.1.7 Description: The issue concerns permissions rules not being applied when moving issues between projects of the same group, allowing users to read confidential Epic references. Recommendations: For GitLab...