CVE-2020-10087

GitLab before 12.8.2 allows Information Disclosure. Badge images were not being proxied, causing mixed content warnings as well as leaking the IP addr...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

GitLab before 12.8.2 allows Information Disclosure. Badge images were not being proxied, causing mixed content warnings as well as leaking the IP address of the user.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

影響パッケージ

Bitnami gitlab

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"12.8.2"}]}]

参照URL

advisory about.gitlab.com
advisory about.gitlab.com
web nvd.nist.gov