CVE-2020-26413

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 13.6.2

Medium · published December 11, 2020

CVSS v3.1
5.3
EPSS
35%
Percentile
98.4
In the wild
Unconfirmed
What it is

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 13.6.2. Information disclosure via GraphQL results in user email being unexpectedly visible.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.34931 · 98.4th percentile
Published
2020-12-11T03:47Z
EPSS history
Timeline
  • 11 DEC 03:47Z
    An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 13.6.2
    cvelistv5