CVE-2020-11506: High severity gitlab vulnerability
Published Apr 22, 2020
·Updated
An issue was discovered in GitLab 10.7.0 and later through 12.9.2. A Workhorse bypass could lead to job artifact uploads and file disclosure (Exposure of Sensitive Information) via request smuggling.
Affected Software
6 affected components
GitLab GitLab>=10.7.0<12.7.9
GitLab GitLab>=10.7.9<12.7.9
GitLab GitLab>=12.8.0<12.8.9
GitLab GitLab>=12.8.0<12.8.9
GitLab GitLab>=12.9.0<12.9.3
GitLab GitLab>=12.9.0<12.9.3
Event History
Apr 22, 2020
CVE Published
via MITRE·07:50 PM
Data Sourced
via MITRE·07:50 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-11506?
CVE-2020-11506 has been classified as a high severity vulnerability due to its potential for file disclosure and exposure of sensitive information.
2
How do I fix CVE-2020-11506?
To fix CVE-2020-11506, upgrade GitLab to version 12.9.3 or later for both community and enterprise editions.
3
What versions of GitLab are affected by CVE-2020-11506?
CVE-2020-11506 affects GitLab versions from 10.7.0 through 12.9.2.
4
What type of vulnerability is CVE-2020-11506?
CVE-2020-11506 is a Workhorse bypass vulnerability that can lead to job artifact uploads and file disclosure.
5
What impact does CVE-2020-11506 have on GitLab users?
CVE-2020-11506 can result in unauthorized access to sensitive files and information through request smuggling attacks.