Skip to content
Sign in
3.1 Low

CVE-2020-26412 Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics…

Description

Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics starting in GitLab EE 13.2 before 13.6.2.

Affected products and versions

Product Affected versions Fixed in
GitLab EE 13.6 13.6 → < 13.6.2 13.6.2
GitLab EE 13.5 13.5 → < 13.5.5 13.5.5
GitLab EE 13.2 13.2 → < 13.4.7 13.4.7

Other CVEs of GitLab EE

The 10 CVEs of GitLab EE →
CVE-2021-22240 Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on… 4.2 Medium CVE-2020-26416 Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms… 4.0 Medium CVE-2020-13349 An issue has been discovered in GitLab EE affecting all versions starting from 8.12 4.3 Medium CVE-2020-13348 An issue has been discovered in GitLab EE affecting all versions starting from 10.2 5.7 Medium
Track this CVE