CVE-2020-10975 (NVD)

2020-04-08

GitLab EE/CE 10.8 to 12.9 is leaking metadata and comments on vulnerabilities to unauthorized users on the vulnerability feedback page.

Products Gitlab
Type Information Exposure (CWE-200)
First patch - None (likely due to unavailable code)
Links https://about.gitlab.com/releases/categories/releases/
https://about.gitlab.com/releases/2020/03/26/security-release-12-dot-9-dot-1-released/