CVE-2020-13261

Amazon EKS credentials disclosure in GitLab CE/EE 12.6 and later through 13.0.1 allows other administrators to view Amazon EKS credentials via HTML so...

Original description

The description as published by the source.

Amazon EKS credentials disclosure in GitLab CE/EE 12.6 and later through 13.0.1 allows other administrators to view Amazon EKS credentials via HTML source code

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami gitlab

[{"type":"SEMVER","events":[{"introduced":"12.6.0"},{"fixed":"12.9.8"},{"introduced":"12.10.0"},{"fixed":"12.10.7"},{"introduced":"13.0.0"},{"fixed":"13.0.1"}]}]

References

advisory gitlab.com
report gitlab.com
report hackerone.com
web nvd.nist.gov