CVE-2020-26415
Information about the starred projects for private user profiles was exposed via the GraphQL API starting from 12.2 via the REST API. This affects Git...
Original description
The description as published by the source.
Information about the starred projects for private user profiles was exposed via the GraphQL API starting from 12.2 via the REST API. This affects GitLab >=12.2 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"12.2.0"},{"fixed":"13.4.7"},{"introduced":"13.5.0"},{"fixed":"13.5.5"},{"introduced":"13.6.0"},{"fixed":"13.6.2"}]}]
References
- advisory gitlab.com
- report gitlab.com
- web nvd.nist.gov