CVE-2020-26413

Опубликовано: 11 дек. 2020

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Критический

Описание

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 13.6.2. Information disclosure via GraphQL results in user email being unexpectedly visible.

Ссылки

https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26413.json
Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/244275
Broken Link
https://hackerone.com/reports/972355
Permissions Required
https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26413.json
Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/244275
Broken Link
https://hackerone.com/reports/972355
Permissions Required

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*

Версия от 13.4.0 (включая) до 13.6.2 (исключая)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

Версия от 13.4.0 (включая) до 13.6.2 (исключая)

EPSS

Процентиль: 100%

0.92644

Критический

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2020-26413

CVSS3: 5.3

ubuntu

около 5 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 13.6.2. Information disclosure via GraphQL results in user email being unexpectedly visible.

CVE-2020-26413

CVSS3: 5.3

debian

около 5 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions st ...

GHSA-j6h5-jcwm-38vr

github

больше 3 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 13.6.2. Information disclosure via GraphQL results in user email being unexpectedly visible.

EPSS

Процентиль: 100%

0.92644

Критический

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200