CVE-2020-26415
Information about the starred projects for private user profiles was exposed via the GraphQL API starting from 12.2 via the REST API. This affects Git...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Information about the starred projects for private user profiles was exposed via the GraphQL API starting from 12.2 via the REST API. This affects GitLab >=12.2 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"12.2.0"},{"fixed":"13.4.7"},{"introduced":"13.5.0"},{"fixed":"13.5.5"},{"introduced":"13.6.0"},{"fixed":"13.6.2"}]}]
Références
- advisory gitlab.com
- report gitlab.com
- web nvd.nist.gov