CVE-2017-6954: Improper Privilege Management

March 17, 2017 (updated October 3, 2019)

An issue was discovered in includes/component. It is possible for authenticated users to edit documents of other users without proper permissions.

References

nvd.nist.gov/vuln/detail/CVE-2017-6954

Detect and mitigate CVE-2017-6954 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →