CVE-2020-10978 (NVD)

2020-04-08

GitLab EE/CE 8.11 to 12.9 is leaking information on Issues opened in a public project and then moved to a private project through Web-UI and GraphQL API.

Products Gitlab
Type Information Exposure (CWE-200)
First patch - None (likely due to unavailable code)
Links https://about.gitlab.com/releases/categories/releases/
https://about.gitlab.com/releases/2020/03/26/security-release-12-dot-9-dot-1-released/