CVE-2014-8540

4

MEDIUMCVSS v2

Published

January 5, 2018

Affected

4 projects

Assigned by

MITRE

Severity scale

010

Description

The groups API in GitLab 6.x and 7.x before 7.4.3 allows remote authenticated guest users to modify ownership of arbitrary groups by leveraging improper permission checks.

gitlab

NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.

>= 6.0.0, <= 6.9.2, >= 7.0.0, < 7.4.3NVD

gitlab

Crates.ioGitlab API client.

>= 6.0.0, <= 6.9.2, >= 7.0.0, < 7.4.3NVD

gitlab

RubyGems

More on this CVE

NVD↗GitHub Advisory↗

Ruby client and CLI for GitLab API

>= 6.0.0, <= 6.9.2, >= 7.0.0, < 7.4.3NVD

NARKOZ/gitlab

GitHubRuby wrapper and CLI for the GitLab REST API

>= 6.0.0, <= 6.9.2, >= 7.0.0, < 7.4.3NVD

Security Advisories

CVE-2014-8540

Description

More on this CVE