Skip to content
OpenAdvisories
High · 7.7 CVE-2020-13323 EUVD-2020-5583GHSA-mrc8-h5gc-pvrr

A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be read via Todos

Published Sep 29, 2020 · Updated Aug 4, 2024 · Assigned by GitLab

Vendor: GitLab Product: GitLab Package: gitlab Category: Web / CMS Ecosystem: Ubuntu

Description

A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be read via Todos

Affected products

VendorProductAffectedFixed
GitLab GitLab >=8.5, <12.10.13, >=13.0, <13.0.8, >=13.1, <13.1.2 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS gitlab No fix yet —

References