changelogs/unreleased/security-65756-ex-admin-attacker-can-comment-in-internal.yml · d40b79021dc1f1ad95e608e17cac69a4390c9cf9 · Boxiang Sun / gitlab-ce · GitLab

Find file Blame History Permalink

Improper access control allows the attacker to comment in internal commit... · d40b7902
Charlie Ablett authored 5 years ago
```
Improper access control allows the attacker to comment in internal commit after they are no longer admin
```
d40b7902

security-65756-ex-admin-attacker-can-comment-in-internal.yml

123 Bytes

---
title: Disallow unprivileged users from commenting on private repository commits
merge_request:
author:
type: security