CVEs-PoC/2014/CVE-2014-8540.md

CVE-2014-8540

Description

The groups API in GitLab 6.x and 7.x before 7.4.3 allows remote authenticated guest users to modify ownership of arbitrary groups by leveraging improper permission checks.

POC

Reference

• https://about.gitlab.com/2014/10/30/gitlab-7-4-3-released/
• https://about.gitlab.com/2014/10/30/gitlab-7-4-3-released/

Github

No PoCs found on GitHub currently.