CVE-2020-26417

Published: Dec 11, 2020Modified: Nov 21, 2024

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership. This affects versions >=13.6 to <13.6.2, >=13.5 to <13.5.5, and >=13.1 to <13.4.7.

Affected (6)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	From 13.1.0 to 13.4.7
Gitlab Gitlab	From 13.5.0 to 13.5.5
Gitlab Gitlab	From 13.6.0 to 13.6.2
Gitlab Gitlab	From 13.1.0 to 13.4.7
Gitlab Gitlab	From 13.5.0 to 13.5.5
Gitlab Gitlab	From 13.6.0 to 13.6.2