CVE-2020-26408
A limited information disclosure vulnerability exists in Gitlab CE/EE from >= 12.2 to =13.5 to =13.6 to
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A limited information disclosure vulnerability exists in Gitlab CE/EE from >= 12.2 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2 that allows an attacker to view limited information in user's private profile
影響パッケージ
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"12.2.0"},{"fixed":"13.4.7"},{"introduced":"13.5.0"},{"fixed":"13.5.5"},{"introduced":"13.6.0"},{"fixed":"13.6.2"}]}]
参照URL
- advisory gitlab.com
- report gitlab.com
- report hackerone.com
- web nvd.nist.gov