CVE-2020-11505
An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7.9, 12.8.x before 12.8.9, and 12.9.x before 12.9.3. A...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7.9, 12.8.x before 12.8.9, and 12.9.x before 12.9.3. A Workhorse bypass could lead to NuGet package and file disclosure (Exposure of Sensitive Information) via request smuggling.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"12.7.9"},{"introduced":"12.8.0"},{"fixed":"12.8.9"},{"introduced":"12.9.0"},{"fixed":"12.9.3"}]}]
Références
- advisory about.gitlab.com
- advisory about.gitlab.com
- web nvd.nist.gov