CVE-2020-10955

GitLab EE/CE 11.1 through 12.9 is vulnerable to parameter tampering on an upload feature that allows an unauthorized user to read content available un...

Original description

The description as published by the source.

GitLab EE/CE 11.1 through 12.9 is vulnerable to parameter tampering on an upload feature that allows an unauthorized user to read content available under specific folders.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami gitlab

[{"type":"SEMVER","events":[{"introduced":"11.1.0"},{"fixed":"12.9.1"}]}]

References

advisory about.gitlab.com
advisory about.gitlab.com
advisory debian.org
web nvd.nist.gov