CVE-2020-26408

Published: Dec 11, 2020Modified: Nov 21, 2024

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

A limited information disclosure vulnerability exists in Gitlab CE/EE from >= 12.2 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2 that allows an attacker to view limited information in user's private profile

Affected (6)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	From 12.2.0 to 13.4.7
Gitlab Gitlab	From 13.5.0 to 13.5.5
Gitlab Gitlab	From 13.6.0 to 13.6.2
Gitlab Gitlab	From 12.2.0 to 13.4.7
Gitlab Gitlab	From 13.5.0 to 13.5.5
Gitlab Gitlab	From 13.6.0 to 13.6.2