CVE-2020-11505
An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7.9, 12.8.x before 12.8.9, and 12.9.x before 12.9.3. A...
Original description
The description as published by the source.
An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7.9, 12.8.x before 12.8.9, and 12.9.x before 12.9.3. A Workhorse bypass could lead to NuGet package and file disclosure (Exposure of Sensitive Information) via request smuggling.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"12.7.9"},{"introduced":"12.8.0"},{"fixed":"12.8.9"},{"introduced":"12.9.0"},{"fixed":"12.9.3"}]}]
References
- advisory about.gitlab.com
- advisory about.gitlab.com
- web nvd.nist.gov