Lucene search
GoogleOSV:BIT-GITLAB-2020-26406HistoryMar 06, 2024 - 11:21 a.m.
BIT-gitlab-2020-26406
2024-03-0611:21:20
Google
osv.dev
3
sast
ciconfiguration
unauthorized access
gitlab ee
graphql
public projects
repository visibility
private projects
software vulnerability
Certain SAST CiConfiguration information could be viewed by unauthorized users in GitLab EE starting with 13.3. This information was exposed through GraphQL to non-members of public projects with repository visibility restricted as well as guest members on private projects. Affected versions are: >=13.3, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2.
Related
osv
osv
CVE-2020-26406
2020-11-17 01:15:13
cvelist
cvelist
CVE-2020-26406
2020-11-17 00:13:19
ubuntucve
ubuntucve
CVE-2020-26406
2020-11-17 00:00:00
prion
prion
Design/Logic Flaw
2020-11-17 01:15:00
cve
cve
CVE-2020-26406
2020-11-17 01:15:00
debiancve
debiancve
CVE-2020-26406
2020-11-17 01:15:00
6.2 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
39.8%
Related for OSV:BIT-GITLAB-2020-26406