Vulnerabilities > CVE-2020-35236 - Missing Authorization vulnerability in Amazee Lagoon

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

low complexity

NVD

Published: 2020-12-14

Updated: 2021-07-21

Summary

The GitLab Webhook Handler in amazee.io Lagoon before 1.12.3 has incorrect access control associated with project deletion.

Part	Description	Count
Application	Amazee Amazee Lagoon 0.6.0 Amazee Lagoon 0.7.0 Amazee Lagoon 0.9.0 Amazee Lagoon 0.9.1 Amazee Lagoon 0.15.0 Amazee Lagoon 0.15.1 Amazee Lagoon 0.16.0 Amazee Lagoon 0.16.1 Amazee Lagoon 0.17.0 Amazee Lagoon 0.18.0 Amazee Lagoon 0.18.1 Amazee Lagoon 0.18.2 Amazee Lagoon 0.18.3 Amazee Lagoon 0.18.4 Amazee Lagoon 0.18.5 Amazee Lagoon 0.18.6 Amazee Lagoon 0.18.7 Amazee Lagoon 0.18.8 Amazee Lagoon 0.18.9 Amazee Lagoon 0.18.10 Amazee Lagoon 0.18.11 Amazee Lagoon 0.19.0 Amazee Lagoon 0.19.1 Amazee Lagoon 0.19.2 Amazee Lagoon 0.20.0 Amazee Lagoon 0.20.1 Amazee Lagoon 0.21.0 Amazee Lagoon 0.21.1 Amazee Lagoon 0.21.2 Amazee Lagoon 0.21.3 Amazee Lagoon 0.21.4 Amazee Lagoon 0.22.0 Amazee Lagoon 0.22.1 Amazee Lagoon 0.23.0 Amazee Lagoon 0.23.1 Amazee Lagoon 0.23.2 Amazee Lagoon 0.24.0 Amazee Lagoon 1.0.0 Amazee Lagoon 1.0.1 Amazee Lagoon 1.0.2 Amazee Lagoon 1.1.0 Amazee Lagoon 1.1.1 Amazee Lagoon 1.1.2 Amazee Lagoon 1.1.3 Amazee Lagoon 1.1.4 Amazee Lagoon 1.2.0 Amazee Lagoon 1.2.1 Amazee Lagoon 1.3.0 Amazee Lagoon 1.3.1 Amazee Lagoon 1.4.0 Amazee Lagoon 1.4.1 Amazee Lagoon 1.4.2 Amazee Lagoon 1.5.0 Amazee Lagoon 1.6.0 Amazee Lagoon 1.7.0 Amazee Lagoon 1.7.1 Amazee Lagoon 1.8.0 Amazee Lagoon 1.8.1 Amazee Lagoon 1.8.2 Amazee Lagoon 1.9.0 Amazee Lagoon 1.9.1 Amazee Lagoon 1.10.0 Amazee Lagoon 1.11.0 Amazee Lagoon 1.12.0 Amazee Lagoon 1.12.1 Amazee Lagoon 1.12.2	66