CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.3. It affects GitLab.
CVE
CVE-2020-26417
Severity
MEDIUM
CVSS
5.3
EPSS
1.16%
GitLab
Original NVD Description
Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership. This affects versions >=13.6 to <13.6.2, >=13.5 to <13.5.5, and >=13.1 to <13.4.7.
Related CVEs
Other vulnerabilities affecting the same vendor(s)