CVE-2014-8540 | BDVDB-2026-94831 Detail

Description#

The groups API in GitLab 6.x and 7.x before 7.4.3 allows remote authenticated guest users to modify ownership of arbitrary groups by leveraging improper permission checks.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/98449
http://www.securityfocus.com/bid/70841
http://www.openwall.com/lists/oss-security/2014/10/31/2
https://gitlab.com/gitlab-org/gitlab-ce/commit/a2dfff418bf2532ebb5aee88414107929b17eefd
https://about.gitlab.com/2014/10/30/gitlab-7-4-3-released/

Exploit#

No public exploit known

History#

Version 12018-01-05Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.