CVE-2020-26408: Medium severity gitlab vulnerability
A limited information disclosure vulnerability exists in Gitlab CE/EE from >= 12.2 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2 that allows an attacker to view limited information in user's private profile
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-26408?
CVE-2020-26408 is a limited information disclosure vulnerability in Gitlab CE/EE from version 12.2 to version 13.4.7, version 13.5 to version 13.5.5, and version 13.6 to version 13.6.2.
How severe is CVE-2020-26408?
CVE-2020-26408 has a severity value of 5.3, which is considered medium.
What is the affected software for CVE-2020-26408?
The affected software for CVE-2020-26408 is Gitlab CE/EE versions 12.2 to 13.4.7, 13.5 to 13.5.5, and 13.6 to 13.6.2.
How can an attacker exploit CVE-2020-26408?
An attacker can exploit CVE-2020-26408 by viewing limited information in a user's private profile.
Are there any references for CVE-2020-26408?
Yes, you can find references for CVE-2020-26408 at the following URLs: [link1](https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26408.json), [link2](https://gitlab.com/gitlab-org/gitlab/-/issues/33563), and [link3](https://hackerone.com/reports/703894).