CVE-2020-13359 in Community Edition
Sumário
de MITRE • 19/11/2020
The Terraform API in GitLab CE/EE 12.10+ exposed the object storage signed URL on the delete operation allowing a malicious project maintainer to overwrite the Terraform state, bypassing audit and other business controls. Affected versions are >=12.10, =13.4, =13.5,
If you want to get best quality of vulnerability data, you may have to visit VulDB.