CVE-2020-10087

7.5

HIGHCVSS v3

Published

March 13, 2020

CVSS v2

5 MEDIUM

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

GitLab before 12.8.2 allows Information Disclosure. Badge images were not being proxied, causing mixed content warnings as well as leaking the IP address of the user.

gitlab

NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.

<= 12.8.1NVD

@semantic-release/gitlab

NPMsemantic-release plugin to publish a GitLab release

<= 12.8.1NVD

semantic-release/gitlab

GitHub

More on this CVE

NVD↗GitHub Advisory↗

:fox_face: semantic-release plugin to publish a GitLab release

<= 12.8.1NVD

gitlab

Python Package IndexGet GitLab user Details

<= 12.8.1NVD

gitlab

Crates.ioGitlab API client.

<= 12.8.1NVD

gitlab

RubyGemsRuby client and CLI for GitLab API

<= 12.8.1NVD

NARKOZ/gitlab

GitHubRuby wrapper and CLI for the GitLab REST API

<= 12.8.1NVD

Security Advisories

CVE-2020-10087

Description

More on this CVE