First published: Wed Apr 22 2020(Updated: )
An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7.9, 12.8.x before 12.8.9, and 12.9.x before 12.9.3. A Workhorse bypass could lead to NuGet package and file disclosure (Exposure of Sensitive Information) via request smuggling.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
GitLab GitLab | <12.7.9 | |
GitLab GitLab | <12.7.9 | |
GitLab GitLab | >=12.8.0<12.8.9 | |
GitLab GitLab | >=12.8.0<12.8.9 | |
GitLab GitLab | >=12.9.0<12.9.3 | |
GitLab GitLab | >=12.9.0<12.9.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.