Possibilty to purchase Ultimate - 1 Year (EDU or OSS)
Low
Vulnerability Details
Hi,
Any user can purchase Ultimate - 1 Year (EDU or OSS) which is for educational institutions or open source projects.I have found here https://gitlab.com/gitlab-org/customers-gitlab-com/-/issues/860 list of Gitlab plan id and found Ultimate - 1 Year which is free and purchased.
Steps to reproduce:
Login in to your account https://customers.gitlab.com/
And go to https://customers.gitlab.com/subscriptions/new?plan_id=2c92a0fd63afe3fd0163d87aecee230a&transaction=create_subscription
Best,
@steppe
## Impact
Attacker can bypass GitLab for Education Program Requirements.
Actions
View on HackerOneReport Stats
- Report ID: 882848
- State: Closed
- Substate: resolved
- Upvotes: 21