The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to incorrect authentication, allows a perpetrator to access confidential data.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to incorrect authentication on the pipelines page. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...

PT-2021-6484 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 13.12 and later Description: The issue is related to improper authorization on the pipelines page, allowing unauthorized users to view some pipeline information for public projects that have access to pipelines restricte...