CVE-2020-10976

2020-04-0819:15:12

Google

osv.dev

6.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.1%

JSON

GitLab EE/CE 8.17 to 12.9 is vulnerable to information leakage when querying a merge request widget.

CPENameOperatorVersion
gitlabeq2.6.2
gitlabeq1.0.2
gitlabeq8.12.0-rc2-ee
gitlabeq8.12.0-rc1
gitlabeq6.7.1
gitlabeq8.11.0-rc3-ee
gitlabeq8.12.0-rc6-ee
gitlabeq2.4.0
gitlabeq4.0.0rc1
gitlabeq4.0.0rc2

Name	Operator	Version
gitlab	eq	2.6.2
gitlab	eq	1.0.2
gitlab	eq	8.12.0-rc2-ee
gitlab	eq	8.12.0-rc1
gitlab	eq	6.7.1
gitlab	eq	8.11.0-rc3-ee
gitlab	eq	8.12.0-rc6-ee
gitlab	eq	2.4.0
gitlab	eq	4.0.0rc1
gitlab	eq	4.0.0rc2