exploitDog

GHSA-5qpg-r237-3pm4

Опубликовано: 24 мая 2022

Источник: github

Github: Не прошло ревью

Описание

GitLab 12.3.5 through 12.8.1 allows Information Disclosure. A particular view was exposing merge private merge request titles.

GitLab 12.3.5 through 12.8.1 allows Information Disclosure. A particular view was exposing merge private merge request titles.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2020-10085
https://about.gitlab.com/releases/2020/03/04/gitlab-12-dot-8-dot-2-released
https://about.gitlab.com/releases/2020/03/04/gitlab-12-dot-8-dot-2-released/index.html

EPSS

Процентиль: 57%

0.00929

Низкий

CVE ID

Дефекты

CWE-200

Связанные уязвимости

CVE-2020-10085

CVSS3: 5.3

ubuntu

больше 6 лет назад

GitLab 12.3.5 through 12.8.1 allows Information Disclosure. A particular view was exposing merge private merge request titles.

CVE-2020-10085

CVSS3: 5.3

nvd

больше 6 лет назад

GitLab 12.3.5 through 12.8.1 allows Information Disclosure. A particular view was exposing merge private merge request titles.

CVE-2020-10085

CVSS3: 5.3

debian

больше 6 лет назад

GitLab 12.3.5 through 12.8.1 allows Information Disclosure. A particul ...

EPSS

Процентиль: 57%

0.00929

Низкий

CVE ID

Дефекты

CWE-200