Lucene search

K
osvGoogleOSV:CVE-2020-26416
HistoryDec 11, 2020 - 4:15 a.m.

CVE-2020-26416

2020-12-1104:15:11
Google
osv.dev
2

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.6%

Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms via Rails logs. This affects versions >=8.4 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2.

CPENameOperatorVersion
gitlabeq13.6.0-ee
gitlabeq13.6.1-ee

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.6%