high7.5
CVE-2020-11505
An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7.9, 12.8.x before 12.8.9, and 12.9.x before 12.9.3.
Impact
An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7.9, 12.8.x before 12.8.9, and 12.9.x before 12.9.3. A Workhorse bypass could lead to NuGet package and file disclosure (Exposure of Sensitive Information) via request smuggling.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitlab | Gitlab | before 12.7.9 from 12.8.0 before 12.8.9 from 12.9.0 before 12.9.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://about.gitlab.com/blog/categories/releases/
- https://about.gitlab.com/releases/2020/04/14/critical-security-release-gitlab-12-dot-9-dot-3-released/
- https://about.gitlab.com/blog/categories/releases/
- https://about.gitlab.com/releases/2020/04/14/critical-security-release-gitlab-12-dot-9-dot-3-released/