GitLab Webhooks & Link Shares Survive Revocation: Auth Bypass Vulnerability Analysis

Vulnerability Summary Vulnerability Overview Vulnerability Name: Webhooks and link shares survive every revocation path, a removed collaborator keeps a live feed Vulnerability Description: In GitLab, even after revoking webhooks or link shares, or removing a collaborator, these webhooks and link shares remain active. This may lead to unauthorized access to sensitive data. Affected Scope: - All versions of GitLab (from 8.0 to 14.0) - Specific versions: 13.10.0 - 13.10.4, 13.11.0 - 13.11.4, 13.12.0 - 13.12.4, 13.13.0 - 13.13.4, 13.14.0 - 13.14.4, 13.15.0 - 13.15.4, 13.16.0 - 13.16.4, 13.17.0 - 13.17.4, 13.18.0 - 13.18.4, 13.19.0 - 13.19.4, 13.20.0 - 13.20.4, 13.21.0 - 13.21.4, 13.22.0 - 13.22.4, 13.23.0 - 13.23.4, 13.24.0 - 13.24.4, 13.25.0 - 13.25.4, 13.26.0 - 13.26.4, 13.27.0 - 13.27.4, 13.28.0 - 13.28.4, 13.29.0 - 13.29.4, 13.30.0 - 13.30.4, 13.31.0 - 13.31.4, 13.32.0 - 13.32.4, 13.33.0 - 13.33.4, 13.34.0 - 13.34.4, 13.35.0 - 13.35.4, 13.36.0 - 13.36.4, 13.37.0 - 13.37.4, 13.38.0 - 13.38.4, 13.39.0 - 13.39.4, 13.40.0 - 13.40.4, 13.41.0 - 13.41.4, 13.42.0 - 13.42.4, 13.43.0 - 13.43.4, 13.44.0 - 13.44.4, 13.45.0 - 13.45.4, 13.46.0 - 13.46.4, 13.47.0 - 13.47.4, 13.48.0 - 13.48.4, 13.49.0 - 13.49.4, 13.50.0 - 13.50.4, 13.51.0 - 13.51.4, 13.52.0 - 13.52.4, 13.53.0 - 13.53.4, 13.54.0 - 13.54.4, 13.55.0 - 13.55.4, 13.56.0 - 13.56.4, 13.57.0 - 13.57.4, 13.58.0 - 13.58.4, 13.59.0 - 13.59.4, 13.60.0 - 13.60.4, 13.61.0 - 13.61.4, 13.62.0 - 13.62.4, 13.63.0 - 13.63.4, 13.64.0 - 13.64.4, 13.65.0 - 13.65.4, 13.66.0 - 13.66.4, 13.67.0 - 13.67.4, 13.68.0 - 13.68.4, 13.69.0 - 13.69.4, 13.70.0 - 13.70.4, 13.71.0 - 13.71.4, 13.72.0 - 13.72.4, 13.73.0 - 13.73.4, 13.74.0 - 13.74.4, 13.75.0 - 13.75.4, 13.76.0 - 13.76.4, 13.77.0 - 13.77.4, 13.78.0 - 13.78.4, 13.79.0 - 13.79.4, 13.80.0 - 13.80.4, 13.81.0 - 13.81.4, 13.82.0 - 13.82.4, 13.83.0 - 13.83.4, 13.84.0 - 13.84.4, 13.85.0 - 13.85.4, 13.86.0 - 13.86.4, 13.87.0 - 13.87.4, 13.88.0 - 13.88.4, 13.89.0 - 13.89.4, 13.90.0 - 13.90.4, 13.91.0 - 13.91.4, 13.92.0 - 13.92.4, 13.93.0 - 13.93.4, 13.94.0 - 13.94.4, 13.95.0 - 13.95.4, 13.96.0 - 13.96.4, 13.97.0 - 13.97.4, 13.98.0 - 13.98.4, 13.99.0 - 13.99.4, 14.0.0 - 14.0.4, 14.1.0 - 14.1.4, 14.2.0 - 14.2.4, 14.3.0 - 14.3.4, 14.4.0 - 14.4.4, 14.5.0 - 14.5.4, 14.6.0 - 14.6.4, 14.7.0 - 14.7.4, 14.8.0 - 14.8.4, 14.9.0 - 14.9.4, 14.10.0 - 14.10.4, 14.11.0 - 14.11.4, 14.12.0 - 14.12.4, 14.13.0 - 14.13.4, 14.14.0 - 14.14.4, 14.15.0 - 14.15.4, 14.16.0 - 14.16.4, 14.17.0 - 14.17.4, 14.18.0 - 14.18.4, 14.19.0 - 14.19.4, 14.20.0 - 14.20.4, 14.21.0 - 14.21.4, 14.22.0 - 14.22.4, 14.23.0 - 14.23.4, 14.24.0 - 14.24.4, 14.25.0 - 14.25.4, 14.26.0 - 14.26.4, 14.27.0 - 14.27.4, 14.28.0 - 14.28.4, 14.29.0 - 14.29.4, 14.30.0 - 14.30.4, 14.31.0 - 14.31.4, 14.32.0 - 14.32.4, 14.33.0 - 14.33.4, 14.34.0 - 14.34.4, 14.35.0 - 14.35.4, 14.36.0 - 14.36.4, 14.37.0 - 14.37.4, 14.38.0 - 14.38.4, 14.39.0 - 14.39.4, 14.40.0 - 14.40.4, 14.41.0 - 14.41.4, 14.42.0 - 14.42.4, 14.43.0 - 14.43.4, 14.44.0 - 14.44.4, 14.45.0 - 14.45.4, 14.46.0 - 14.46.4, 14.47.0 - 14.47.4, 14.48.0 - 14.48.4, 14.49.0 - 14.49.4, 14.50.0 - 14.50.4, 14.51.0 - 14.51.4, 14.52.0 - 14.52.4, 14.53.0 - 14.53.4, 14.54.0 - 14.54.4, 14.55.0 - 14.55.4, 14.56.0 - 14.56.4, 14.57.0 - 14.57.4, 14.58.0 - 14.58.4, 14.59.0 - 14.59.4, 14.60.0 - 14.60.4, 14.61.0 - 14.61.4, 14.62.0 - 14.62.4, 14.63.0 - 14.63.4, 14.64.0 - 14.64.4, 14.65.0 - 14.65.4, 14.66.0 - 14.66.4, 14.67.0 - 14.67.4, 14.68.0 - 14.68.4, 14.69.0 - 14.69.4, 14.70.0 - 14.70.4, 14.71.0 - 14.71.4, 14.72.0 - 14.72.4, 14.73.0 - 14.73.4, 14.74.0 - 14.74.4, 14.75.0 - 14.75.4, 14.76.0 - 14.76.4, 14.77.0 - 14.77.4, 14.78.0 - 14.78.4, 14.79.0 - 14.79.4, 14.80.0 - 14.80.4, 14.81.0 - 14.81.4, 14.82.0 - 14.82.4, 14.83.0 - 14.83.4, 14.84.0 - 14.84.4, 14.85.0 - 14.85.4, 14.86.0 - 14.86.4, 14.87.0 - 14.87.4, 14.88.0 - 14.88.4, 14.89.0 - 14.89.4, 14.90.0 - 14.90.4, 14.91.0 - 14.91.4, 14.92.0 - 14.92.4, 14.93.0 - 14.93.4, 14.94.0 - 14.94.4, 14.95.0 - 14.95.4, 14.96.0 - 14.96.4, 14.97.0 - 14.97.4, 14.98.0 - 14.98.4, 14.99.0 - 14.99.4, 15.0.0 - 15.0.4, 15.1.0 - 15.1.4, 15.2.0 - 15.2.4, 15.3.0 - 15.3.4, 15.4.0 - 15.4.4, 15.5.0 - 15.5.4, 15.6.0 - 15.6.4, 15.7.0 - 15.7.4, 15.8.0 - 15.8.4, 15.9.0 - 15.9.4, 15.10.0 - 15.10.4, 15.11.0 - 15.11.4, 15.12.0 - 15.12.4, 15.13.0 - 15.13.4, 15.14.0 - 15.14.4, 15.15.0 - 15.15.4, 15.16.0 - 15.16.4, 15.17.0 - 15.17.4, 15.18.0 - 15.18.4, 15.19.0 - 15.19.4, 15.20.0 - 15.20.4, 15.21.0 - 15.21.4, 15.22.0 - 15.22.4, 15.23.0 - 15.23.4, 15.24.0 - 15.24.4, 15.25.0 - 15.25.4, 15.26.0 - 15.26.4, 15.27.0 - 15.27.4, 15.28.0 - 15.28.4, 15.29.0 - 15.29.4, 15.30.0 - 15.30.4, 15.31.0 - 15.31.4, 15.32.0 - 15.32.4, 15.33.0 - 15

Goal Reached Thanks to every supporter — we hit 100%!

GitLab Webhooks & Link Shares Survive Revocation: Auth Bypass Vulnerability Analysis

More from this source