Skip to content
OpenAdvisories

Package · Maven

com.google.gerrit:gerrit-plugin-api

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 3.5
    CVE-2020-8920

    Overoptimization leads to private information leak in Gerrit

    An information leak vulnerability exists in Gerrit versions prior to 2.14.22, 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where an overoptimization with the FilteredRepository wrapper skips the verification of access on All-Users repositories, allowing an attacke…

    Gerrit Gerrit com.google.gerrit:gerrit-plugin-api Maven