CVE-2020-10087

2020-03-1317:15:12

Google

osv.dev

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.5%

JSON

GitLab before 12.8.2 allows Information Disclosure. Badge images were not being proxied, causing mixed content warnings as well as leaking the IP address of the user.

CPENameOperatorVersion
gitlabeq2.6.2
gitlabeq1.0.2
gitlabeq8.12.0-rc2-ee
gitlabeq12.8.0-ee
gitlabeq8.12.0-rc1
gitlabeq6.7.1
gitlabeq8.11.0-rc3-ee
gitlabeq8.12.0-rc6-ee
gitlabeq2.4.0
gitlabeq4.0.0rc1

Name	Operator	Version
gitlab	eq	2.6.2
gitlab	eq	1.0.2
gitlab	eq	8.12.0-rc2-ee
gitlab	eq	12.8.0-ee
gitlab	eq	8.12.0-rc1
gitlab	eq	6.7.1
gitlab	eq	8.11.0-rc3-ee
gitlab	eq	8.12.0-rc6-ee
gitlab	eq	2.4.0
gitlab	eq	4.0.0rc1