Loading HuntDB...

Possibilty to purchase Ultimate - 1 Year (EDU or OSS)

Low
G
GitLab
Submitted None
Reported by steppe

Vulnerability Details

Technical details and impact analysis

Business Logic Errors
Hi, Any user can purchase Ultimate - 1 Year (EDU or OSS) which is for educational institutions or open source projects.I have found here https://gitlab.com/gitlab-org/customers-gitlab-com/-/issues/860 list of Gitlab plan id and found Ultimate - 1 Year which is free and purchased. Steps to reproduce: Login in to your account https://customers.gitlab.com/ And go to https://customers.gitlab.com/subscriptions/new?plan_id=2c92a0fd63afe3fd0163d87aecee230a&transaction=create_subscription Best, @steppe ## Impact Attacker can bypass GitLab for Education Program Requirements.

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

Business Logic Errors