CVE-2020-11505
22.04.2020, 20:15
An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7.9, 12.8.x before 12.8.9, and 12.9.x before 12.9.3. A Workhorse bypass could lead to NuGet package and file disclosure (Exposure of Sensitive Information) via request smuggling.
| Vendor | Product | Version |
|---|---|---|
| gitlab | gitlab | 𝑥 < 12.7.9 |
| gitlab | gitlab | 𝑥 < 12.7.9 |
| gitlab | gitlab | 12.8.0 ≤ 𝑥 < 12.8.9 |
| gitlab | gitlab | 12.8.0 ≤ 𝑥 < 12.8.9 |
| gitlab | gitlab | 12.9.0 ≤ 𝑥 < 12.9.3 |
| gitlab | gitlab | 12.9.0 ≤ 𝑥 < 12.9.3 |
𝑥
= Vulnerable software versions
References