4.3
Moyenne
CVE-2020-13357 An issue was discovered in Gitlab CE/EE versions >= 13.1 to = 13.5 to = 13.6…
Description
An issue was discovered in Gitlab CE/EE versions >= 13.1 to <13.4.7, >= 13.5 to <13.5.5, and >= 13.6 to <13.6.2 allowed an unauthorized user to access the user list corresponding to a feature flag in a project.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| GitLab CE/EE | Versions non publiées |
Références
- gitlab.com gitlab.com
- hackerone.com hackerone.com
- gitlab.com gitlab.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de GitLab CE/EE
Les 22 CVE de GitLab CE/EE →
CVE-2020-26408
A limited information disclosure vulnerability exists in Gitlab CE/EE from >= 12.2 to =13.5 to =13.6…
5.3
Moyenne
CVE-2020-26413
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 13.6.2
5.3
Moyenne
CVE-2020-26417
Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership
5.3
Moyenne
CVE-2020-26409
A DOS vulnerability exists in Gitlab CE/EE >=10.3, =13.5,…
4.3
Moyenne