CVE-2020-26417
11.12.2020, 04:15
Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership. This affects versions >=13.6 to <13.6.2, >=13.5 to <13.5.5, and >=13.1 to <13.4.7.Enginsight
| Vendor | Product | Version |
|---|---|---|
| gitlab | gitlab | 13.1.0 ≤ 𝑥 < 13.4.7 |
| gitlab | gitlab | 13.1.0 ≤ 𝑥 < 13.4.7 |
| gitlab | gitlab | 13.5.0 ≤ 𝑥 < 13.5.5 |
| gitlab | gitlab | 13.5.0 ≤ 𝑥 < 13.5.5 |
| gitlab | gitlab | 13.6.0 ≤ 𝑥 < 13.6.2 |
| gitlab | gitlab | 13.6.0 ≤ 𝑥 < 13.6.2 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration