Aller au contenu
en Se connecter
5.3 Moyenne

CVE-2020-26417 Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership

Description

Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership. This affects versions >=13.6 to <13.6.2, >=13.5 to <13.5.5, and >=13.1 to <13.4.7.

Produits et versions touchés

Produit Versions touchées Corrigé en
GitLab CE/EE Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de GitLab CE/EE

Les 22 CVE de GitLab CE/EE →
CVE-2020-26408 A limited information disclosure vulnerability exists in Gitlab CE/EE from >= 12.2 to =13.5 to =13.6… 5.3 Moyenne CVE-2020-13357 An issue was discovered in Gitlab CE/EE versions >= 13.1 to = 13.5 to = 13.6… 4.3 Moyenne CVE-2020-26413 An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 13.6.2 5.3 Moyenne CVE-2020-26409 A DOS vulnerability exists in Gitlab CE/EE >=10.3, =13.5,… 4.3 Moyenne
Suivre cette CVE