Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Improper access control in the runner jobs API in GitLab CE/EE affecting all versions prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows a previous maintainer of a project with a specific runner to access job and project meta data under certain conditions
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
N/A
Vulnerability Title
GitLab 访问控制错误漏洞
Vulnerability Description
GitLab是美国GitLab公司的一个开源的端到端软件开发平台，具有内置的版本控制、问题跟踪、代码审查、CI/CD（持续集成和持续交付）等功能。 GitLab 存在访问控制错误漏洞，该漏洞源于允许具有特定运行器的项目的先前维护者访问作业以及特定条件下的项目元数据。以下产品版本受到影响：14.10.5 之前的所有版本、15.0.4 之前的 15.0 和 15.1.1 之前的 15.1。
CVSS Information
N/A
Vulnerability Type
N/A