CVE-2020-35236
- Source
- https://cve.org/CVERecord?id=CVE-2020-35236
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-35236.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2020-35236
- Published
- 2020-12-14T05:15:10.933Z
- Modified
- 2026-04-10T04:19:13.419377Z
- Severity
-
- 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
The GitLab Webhook Handler in amazee.io Lagoon before 1.12.3 has incorrect access control associated with project deletion.
- References
Affected packages
Git / github.com/amazeeio/lagoon
Affected ranges
- Type
- GIT
- Repo
- https://github.com/amazeeio/lagoon
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
- Database specific
{ "versions": [ { "introduced": "0" }, { "fixed": "1.12.3" } ] }
- Type
- GIT
- Repo
- https://github.com/uselagoon/lagoon
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
Other
list
v0.*
v0.0.0-test
v0.0.0-test2
v0.15.0
v0.15.1
v0.16.0
v0.16.1
v0.17.0
v0.18.0
v0.18.1
v0.18.10
v0.18.11
v0.18.2
v0.18.3
v0.18.4
v0.18.5
v0.18.6
v0.18.7
v0.18.8
v0.18.9
v0.19.0
v0.19.1
v0.19.2
v0.20.0
v0.20.1
v0.21.0
v0.21.1
v0.21.2
v0.21.3
v0.21.4
v0.22.0
v0.22.1
v0.23.0
v0.23.1
v0.23.2
v0.24.0
v0.6.0
v0.7.0
v0.9.0
v0.9.1
v1.*
v1.0.0
v1.0.1
v1.0.2
v1.1.0
v1.1.1
v1.1.3
v1.1.4
v1.10.0
v1.11.0
v1.12.0
v1.12.1
v1.12.2
v1.2.0
v1.3.0
v1.3.1
v1.4.0
v1.4.1
v1.4.2
v1.5.0
v1.6.0
v1.7.0
v1.7.1
v1.8.0
v1.8.1
v1.8.2
v1.9.0