CVE-2020-11505: High severity gitlab vulnerability
An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7.9, 12.8.x before 12.8.9, and 12.9.x before 12.9.3. A Workhorse bypass could lead to NuGet package and file disclosure (Exposure of Sensitive Information) via request smuggling.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-11505?
CVE-2020-11505 is considered a moderate severity vulnerability due to the potential exposure of sensitive information.
How do I fix CVE-2020-11505?
To fix CVE-2020-11505, upgrade GitLab to versions 12.7.9, 12.8.9, or 12.9.3 or higher.
What types of GitLab editions are affected by CVE-2020-11505?
Both GitLab Community Edition and Enterprise Edition are affected by CVE-2020-11505.
What is the main issue with CVE-2020-11505?
The main issue with CVE-2020-11505 is a Workhorse bypass that could lead to unauthorized NuGet package and file disclosures.
Which versions of GitLab are vulnerable to CVE-2020-11505?
GitLab versions before 12.7.9, 12.8.x before 12.8.9, and 12.9.x before 12.9.3 are vulnerable to CVE-2020-11505.