Aller au contenu
en Se connecter
5.3 Moyenne

CVE-2020-26406 Certain SAST CiConfiguration information could be viewed by unauthorized users in GitLab EE starting with 13.3

Description

Certain SAST CiConfiguration information could be viewed by unauthorized users in GitLab EE starting with 13.3. This information was exposed through GraphQL to non-members of public projects with repository visibility restricted as well as guest members on private projects. Affected versions are: >=13.3, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2.

Produits et versions touchés

Produit Versions touchées Corrigé en
GitLab EE 13.5 13.5 → < 13.5.2 13.5.2
GitLab EE 13.4 13.4 → < 13.4.5 13.4.5
GitLab EE 13.3 13.3 → < 13.3.9 13.3.9

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de GitLab EE

Les 10 CVE de GitLab EE →
CVE-2021-22240 Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on… 4.2 Moyenne CVE-2020-26412 Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics… 3.1 Faible CVE-2020-26416 Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms… 4.0 Moyenne CVE-2020-13349 An issue has been discovered in GitLab EE affecting all versions starting from 8.12 4.3 Moyenne
Suivre cette CVE