Missing permission check on fork relation creation in GitLab CE/EE 11.3 and later up to and including 13.0.1 allows guest users to create a fork relation on restricted public projects via API
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
gitlab gitlab |