[Git][security-tracker-team/security-tracker][master] CVE-2018-16048/gitlab assigned

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
03c6a6fa by Salvatore Bonaccorso at 2018-10-03T19:04:51Z
CVE-2018-16048/gitlab assigned

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4071,8 +4071,9 @@ CVE-2018-16160
 	RESERVED
 CVE-2018-16159 (The Gift Vouchers plugin through 2.0.1 for WordPress allows SQL ...)
 	NOT-FOR-US: Gift Vouchers plugin for WordPress
-CVE-2018-XXXX [gitlab: Missing Authorization Control API Repository Storage]
+CVE-2018-16048 [gitlab: Missing Authorization Control API Repository Storage]
 	- gitlab <not-affected> (Only affects Enterprise edition)
+	NOTE: https://gitlab.com/gitlab-org/gitlab-ce/issues/49947
 	NOTE: https://about.gitlab.com/2018/08/28/security-release-gitlab-11-dot-2-dot-2-released/
 CVE-2018-16051 [gitlab: Orphaned Upload Files Exposure]
 	- gitlab <unfixed>
@@ -4408,8 +4409,6 @@ CVE-2018-16053
 	RESERVED
 CVE-2018-16052
 	RESERVED
-CVE-2018-16048
-	RESERVED
 CVE-2018-16047
 	RESERVED
 CVE-2018-16046



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/03c6a6fabe2da1a1482893be2ea7a5faaddc6be4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/03c6a6fabe2da1a1482893be2ea7a5faaddc6be4
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181003/8f0c9b8e/attachment.html>