Lucene search

K
osvGoogleOSV:CVE-2020-26417
HistoryDec 11, 2020 - 4:15 a.m.

CVE-2020-26417

2020-12-1104:15:11
Google
osv.dev
2

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.9%

Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership. This affects versions >=13.6 to <13.6.2, >=13.5 to <13.5.5, and >=13.1 to <13.4.7.

CPENameOperatorVersion
gitlabeq13.6.0-ee
gitlabeq13.6.1-ee

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.9%