CVE-2020-10979 (NVD)

2020-04-08

GitLab EE/CE 11.10 to 12.9 is leaking information on restricted CI pipelines metrics to unauthorized users.

Products Gitlab
Type Information Exposure (CWE-200)
First patch - None (likely due to unavailable code)
Links https://about.gitlab.com/releases/categories/releases/
https://about.gitlab.com/releases/2020/03/26/security-release-12-dot-9-dot-1-released/