CVE-2020-10087

GitLab before 12.8.2 allows Information Disclosure

published March 13, 2020

CVSS
—
EPSS
1%
Percentile
67.3
In the wild
Unconfirmed
What it is

GitLab before 12.8.2 allows Information Disclosure. Badge images were not being proxied, causing mixed content warnings as well as leaking the IP address of the user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01174 · 67.3th percentile
Published
2020-03-13T16:34Z
EPSS history
Timeline
  • 13 MAR 16:34Z
    GitLab before 12.8.2 allows Information Disclosure
    cvelistv5