4 matches found
CVE-2020-26412
Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics starting in GitLab EE 13.2 before 13.6.2...
4.3CVSS6.2AI score0.01003EPSS
SaveExploits0
CVE-2020-26412
Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics starting in GitLab EE 13.2 before 13.6.2...
4.3CVSS6.8AI score0.01003EPSS
SaveExploits0References3
CVE-2020-26412
CVE-2020-26412 affects GitLab Enterprise Edition (EE) versions 13.2 up to, but not including, 13.6.2, where removed group members could use To-Do to retrieve updated information on confidential epics. The root cause is an information-disclosure path via To-Do access by deleted-group members. The ...
4.3CVSS4.1AI score0.01003EPSS
SaveExploits0References2Affected Software1
20