Information disclosure in GitLab Enterprise Edition and Gitlab Community Edition - CVE-2020-15525
Published: July 7, 2020 / Updated: July 15, 2020
Vulnerability identifier: #VU29554
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-15525
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The Maven package upload endpoint could be used to override restrictions
and result in the GitLab Workhorse disclosing the existence and
contents of files in the /tmp directory. A remote attacker can gain unauthorized access to sensitive information on the system.
Affected software
GitLab Enterprise Edition
Gitlab Community Edition
Gitlab Community Edition
How to mitigate CVE-2020-15525
Install updates from vendor's website.
GitLab Enterprise Edition - addressed in versions 12.10.14, 13.0.9, 13.1.3
Gitlab Community Edition - addressed in versions 12.10.14, 13.0.9, 13.1.3
Gitlab Community Edition - addressed in versions 12.10.14, 13.0.9, 13.1.3