CVE-2020-10979

GitLab EE/CE versions 11.10–12.9 expose restricted CI pipeline metrics to unauthorized users. Root cause described as an information disclosure vulnerability in these releases. Impact is information leakage, not integrity or availability. Remediation per linked advisories is to upgrade to a fixed...