Lucene search

K
osvGoogleOSV:CVE-2020-26415
HistoryDec 11, 2020 - 4:15 a.m.

CVE-2020-26415

2020-12-1104:15:11
Google
osv.dev
6

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.8%

Information about the starred projects for private user profiles was exposed via the GraphQL API starting from 12.2 via the REST API. This affects GitLab >=12.2 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2.

CPENameOperatorVersion
gitlabeq13.6.0-ee
gitlabeq13.6.1-ee

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.8%