CVE-2020-11505

An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7.9, 12.8.x before 12.8.9, and 12.9.x before 12.9.3

published April 22, 2020

CVSS
—
EPSS
1%
Percentile
67.3
In the wild
Unconfirmed
What it is

An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7.9, 12.8.x before 12.8.9, and 12.9.x before 12.9.3. A Workhorse bypass could lead to NuGet package and file disclosure (Exposure of Sensitive Information) via request smuggling.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01174 · 67.3th percentile
Published
2020-04-22T19:46Z
EPSS history
Timeline
  • 22 APR 19:46Z
    An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7.9, 12.8.x before 12.8.9, and 12.9.x before 12.9.3
    cvelistv5