CVE-2020-10087: High severity gitlab vulnerability
Published Mar 13, 2020
·Updated
GitLab before 12.8.2 allows Information Disclosure. Badge images were not being proxied, causing mixed content warnings as well as leaking the IP address of the user.
Affected Software
2 affected components
GitLab GitLab<=12.8.1
GitLab GitLab<=12.8.1
Event History
Mar 13, 2020
CVE Published
via MITRE·04:34 PM
Data Sourced
via MITRE·04:34 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-10087?
CVE-2020-10087 has a medium severity rating due to its potential for information disclosure.
2
How do I fix CVE-2020-10087?
To fix CVE-2020-10087, upgrade your GitLab instance to version 12.8.2 or later.
3
What does CVE-2020-10087 affect?
CVE-2020-10087 affects GitLab community and enterprise editions prior to version 12.8.2.
4
What kind of information is leaked by CVE-2020-10087?
CVE-2020-10087 can leak user IP addresses due to the improper handling of badge images.
5
Are mixed content warnings a concern in CVE-2020-10087?
Yes, CVE-2020-10087 causes mixed content warnings as a result of badge images not being proxied.