CVE-2020-10976

GitLab EE/CE 8.17 to 12.9 is vulnerable to information leakage when querying a merge request widget...

CVE-2020-10976

CVE-2020-10976 affects GitLab EE/CE versions 8.17 through 12.9, with information leakage when querying the merge request widget. The issue is a server-side information disclosure vulnerability (network vector, no authentication) leading to partial confidentiality impact. It is addressed in GitLab...