CVE-2020-26416
Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms via Rails logs. This affects ve...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms via Rails logs. This affects versions >=8.4 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"8.4.0"},{"fixed":"13.4.7"},{"introduced":"13.5.0"},{"fixed":"13.5.5"},{"introduced":"13.6.0"},{"fixed":"13.6.2"}]}]
Références
- advisory gitlab.com
- web gitlab.com
- web nvd.nist.gov