[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-Id: <20141031060940.33B4542E031@smtpvbsrv1.mitre.org>
Date: Fri, 31 Oct 2014 02:09:40 -0400 (EDT)
From: cve-assign@...re.org
To: valery@...lab.com
Cc: cve-assign@...re.org, oss-security@...ts.openwall.com
Subject: Re: CVE request for GitLab groups API
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> The groups API vulnerability affects GitLab 6.0 and up.
>
> The vulnerability patched by this release allows a guest user to delete the
> owner of a group and to assign any other member as owner through the groups
> API.
>
> You can read more details here
> https://about.gitlab.com/2014/10/30/gitlab-7-4-3-released/
Use CVE-2014-8540.
- --
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)
iQEcBAEBAgAGBQJUUybcAAoJEKllVAevmvmsuhEIAKKDP7Kmi/4quOx8ZVRTinSP
WJDNozG2D8ivcPhb5N7tWn/uqXZKa3KJp84JYRbKsF0DXeghfJc8/ODoZcAxpb06
5k1POZQ0Id4/3lvcYPZjM6rZXEod2PrcNsNU1KzU1IdubkxONieVKZUSgsWTEGrQ
qRuUZ6nCxTy810x72IJb/z6dRemIykMyEY3qu5sOrn19DHozFnuJCZ79h9K9+d2K
inqsOLS40toauo+/KpmqBsU+n2fKXC86QCYR7znczLn8iqPuZjXfULiXlboWWhaS
c9AzX7gQysIFrJeLvt3j5AKiycGK15GLEK7tuDG65756ef8oW7/auuC8hkUxZ/4=
=Ghwv
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
