Possibilty to purchase Ultimate - 1 Year (EDU or OSS)
Low
G
GitLab
Submitted None
Actions:
Reported by
steppe
Vulnerability Details
Technical details and impact analysis
Hi,
Any user can purchase Ultimate - 1 Year (EDU or OSS) which is for educational institutions or open source projects.I have found here https://gitlab.com/gitlab-org/customers-gitlab-com/-/issues/860 list of Gitlab plan id and found Ultimate - 1 Year which is free and purchased.
Steps to reproduce:
Login in to your account https://customers.gitlab.com/
And go to https://customers.gitlab.com/subscriptions/new?plan_id=2c92a0fd63afe3fd0163d87aecee230a&transaction=create_subscription
Best,
@steppe
## Impact
Attacker can bypass GitLab for Education Program Requirements.
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
Business Logic Errors