Description
GitLab 11.8 and later contains a security vulnerability that allows a user to obtain details of restricted pipelines via the merge request endpoint.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | GitLab | 12.1.2 | — |
Published Feb 14, 2020 · Updated Aug 5, 2024 · Assigned by hackerone
GitLab 11.8 and later contains a security vulnerability that allows a user to obtain details of restricted pipelines via the merge request endpoint.
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | GitLab | 12.1.2 | — |