deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-26270
Published: 2020-12-10
Description: In affected versions of TensorFlow running an LSTM/GRU model where the LSTM/GRU layer receives an input with zero-length results in a CHECK failure when using the CUDA backend. This can result in a query-of-death vulnerability, via denial of service, if users can control the input to the layer. This is fixed in versions 1.15.5, 2.0.4, 2.1.3, 2.2.2, 2.3.2, and 2.4.0.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://github.com/tensorflow/tensorflow/commit/14755416e364f17fb1870882fa778c7fec7f16e3; https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m648-33qf-v3gp; https://github.com/tensorflow/tensorflow/commit/14755416e364f17fb1870882fa778c7fec7f16e3
CVE: CVE-2020-29311
Published: 2020-12-10
Description: Ubilling v1.0.9 allows Remote Command Execution as Root user by executing a malicious command that is injected inside the config file and being triggered by another part of the software.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-306
References: https://drive.google.com/file/d/1iLMFSbY8x1CXIf0uFntovY6yZ7N24dQA/view?usp=sharing; https://drive.google.com/file/d/1smOjvenPB-nE0PyIxnfujCT4KcxxkeWV/view?usp=sharing; https://gist.github.com/mhaskar/bfa9c2c799fca6697bcc6a213d08cb3e
CVE: CVE-2020-35076
Published: 2020-12-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2020-35090
Published: 2020-12-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2020-35110
Published: 2020-12-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2020-4829
Published: 2020-12-10
Description: IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in the ksu user command to gain root privileges. IBM X-Force ID: 189960.
CVSS Score: 7.8 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/189960; https://www.ibm.com/support/pages/node/6380430; https://exchange.xforce.ibmcloud.com/vulnerabilities/189960
CVE: CVE-2020-8908
Published: 2020-12-10
Description: A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir(). By default, on unix-like systems, the created directory is world-readable (readable by an attacker with access to the system). The method in question has been marked @Deprecated in versions 30.0 and later and should not be used. For Android developers, we recommend choosing a temporary directory API provided by Android, such as context.getCacheDir(). For other Java developers, we recommend migrating to the Java 7 API java.nio.file.Files.createTempDirectory() which explicitly configures permissions of 700, or configuring the Java runtime's java.io.tmpdir system property to point to a location whose permissions are appropriately configured.
CVSS Score: 3.3 (LOW)
CWE: CWE-378, CWE-732
References: https://github.com/google/guava/commit/fec0dbc4634006a6162cfd4d0d09c962073ddf40; https://github.com/google/guava/issues/4011; https://lists.apache.org/thread.html/r007add131977f4f576c232b25e024249a3d16f66aad14a4b52819d21%40%3Ccommon-issues.hadoop.apache.org%3E
CVE: CVE-2020-28214
Published: 2020-12-11
Description: A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 (all references, all versions), that could allow an attacker to pre-compute the hash value using dictionary attack technique such as rainbow tables, effectively disabling the protection that an unpredictable salt would provide.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-760
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-343-04; https://www.se.com/ww/en/download/document/SEVD-2020-315-05/; https://us-cert.cisa.gov/ics/advisories/icsa-20-343-04
CVE: CVE-2020-28215
Published: 2020-12-11
Description: A CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older), that could cause a wide range of problems, including information exposures, denial of service, and arbitrary code execution when access control checks are not applied consistently.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-343-03; https://www.se.com/ww/en/download/document/SEVD-2020-315-06/; https://us-cert.cisa.gov/ics/advisories/icsa-20-343-03
CVE: CVE-2020-28216
Published: 2020-12-11
Description: A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker to read network traffic over HTTP protocol.
CVSS Score: 7.5 (HIGH)
CWE: CWE-311
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-343-03; https://www.se.com/ww/en/download/document/SEVD-2020-315-06/; https://us-cert.cisa.gov/ics/advisories/icsa-20-343-03
CVE: CVE-2020-28217
Published: 2020-12-11
Description: A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker to read network traffic over HTTP protocol.
CVSS Score: 7.5 (HIGH)
CWE: CWE-311
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-343-03; https://www.se.com/ww/en/download/document/SEVD-2020-315-06/; https://us-cert.cisa.gov/ics/advisories/icsa-20-343-03
CVE: CVE-2020-28218
Published: 2020-12-11
Description: A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker to trick a user into initiating an unintended action.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1021
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-343-03; https://www.se.com/ww/en/download/document/SEVD-2020-315-06/; https://us-cert.cisa.gov/ics/advisories/icsa-20-343-03
CVE: CVE-2020-28219
Published: 2020-12-11
Description: A CWE-522: Insufficiently Protected Credentials vulnerability exists in EcoStruxure Geo SCADA Expert 2019 (Original release and Monthly Updates to September 2020, from 81.7268.1 to 81.7578.1) and EcoStruxure Geo SCADA Expert 2020 (Original release and Monthly Updates to September 2020, from 83.7551.1 to 83.7578.1), that could cause exposure of credentials to server-side users when web users are logged in to Virtual ViewX.
CVSS Score: 7.8 (HIGH)
CWE: CWE-522
References: https://www.se.com/ww/en/download/document/SEVD-2020-343-02/; https://www.se.com/ww/en/download/document/SEVD-2020-343-02/
CVE: CVE-2020-28220
Published: 2020-12-11
Description: A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Modicon M258 Firmware (All versions prior to V5.0.4.11) and SoMachine/SoMachine Motion software (All versions), that could cause a buffer overflow when the length of a file transferred to the webserver is not verified.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: https://www.se.com/ww/en/download/document/SEVD-2020-343-09/; https://www.se.com/ww/en/download/document/SEVD-2020-343-09/
CVE: CVE-2020-7535
Published: 2020-12-11
Description: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal' Vulnerability Type) vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause disclosure of information when sending a specially crafted request to the controller over HTTP.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.se.com/ww/en/download/document/SEVD-2020-343-05/; https://www.se.com/ww/en/download/document/SEVD-2020-343-05/
CVE: CVE-2020-7536
Published: 2020-12-11
Description: A CWE-754:Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M340 CPUs (BMXP34* versions prior to V3.30) Modicon M340 Communication Ethernet modules (BMXNOE0100 (H) versions prior to V3.4 BMXNOE0110 (H) versions prior to V6.6 BMXNOR0200H all versions), that could cause the device to be unreachable when modifying network parameters over SNMP.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: https://security.cse.iitk.ac.in/responsible-disclosure; https://www.se.com/ww/en/download/document/SEVD-2020-343-07/; https://security.cse.iitk.ac.in/responsible-disclosure
CVE: CVE-2020-7537
Published: 2020-12-11
Description: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: https://www.se.com/ww/en/download/document/SEVD-2020-343-08/; https://www.se.com/ww/en/download/document/SEVD-2020-343-08/
CVE: CVE-2020-7539
Published: 2020-12-11
Description: A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause a denial of service vulnerability when a specially crafted packet is sent to the controller over HTTP.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: https://www.se.com/ww/en/download/document/SEVD-2020-343-03/; https://www.se.com/ww/en/download/document/SEVD-2020-343-03/
CVE: CVE-2020-7540
Published: 2020-12-11
Description: A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause unauthenticated command execution in the controller when sending special HTTP requests.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://www.se.com/ww/en/download/document/SEVD-2020-343-04/; https://www.se.com/ww/en/download/document/SEVD-2020-343-04/
CVE: CVE-2020-7541
Published: 2020-12-11
Description: A CWE-425: Direct Request ('Forced Browsing') vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause disclosure of sensitive data when sending a specially crafted request to the controller over HTTP.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-425
References: https://www.se.com/ww/en/download/document/SEVD-2020-343-03/; https://www.se.com/ww/en/download/document/SEVD-2020-343-03/
CVE: CVE-2020-7542
Published: 2020-12-11
Description: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: https://www.se.com/ww/en/download/document/SEVD-2020-343-08/; https://www.se.com/ww/en/download/document/SEVD-2020-343-08/
CVE: CVE-2020-7543
Published: 2020-12-11
Description: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: https://www.se.com/ww/en/download/document/SEVD-2020-343-08/; https://www.se.com/ww/en/download/document/SEVD-2020-343-08/
CVE: CVE-2020-7549
Published: 2020-12-11
Description: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause denial of HTTP and FTP services when a series of specially crafted requests is sent to the controller over HTTP.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-754
References: https://www.se.com/ww/en/download/document/SEVD-2020-343-06/; https://www.se.com/ww/en/download/document/SEVD-2020-343-06/
CVE: CVE-2020-7560
Published: 2020-12-11
Description: A CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert (all versions) and Unity Pro (former name of EcoStruxure™ Control Expert) (all versions), that could cause a crash of the software or unexpected code execution when opening a malicious file in EcoStruxure™ Control Expert software.
CVSS Score: 8.6 (HIGH)
CWE: CWE-123
References: https://www.se.com/ww/en/download/document/SEVD-2020-343-01/; https://www.se.com/ww/en/download/document/SEVD-2020-343-01/
CVE: CVE-2020-17530
Published: 2020-12-11
Description: Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-917, CWE-917
References: http://jvn.jp/en/jp/JVN43969166/index.html; http://packetstormsecurity.com/files/160721/Apache-Struts-2-Forced-Multi-OGNL-Evaluation.html; http://www.openwall.com/lists/oss-security/2022/04/12/6
CVE: CVE-2020-24633
Published: 2020-12-11
Description: There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending especially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211) of access-points or controllers in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility Controllers version(s): 2.1.0.1, 2.2.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04072en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04072en_us
CVE: CVE-2020-24634
Published: 2020-12-11
Description: An attacker is able to remotely inject arbitrary commands by sending especially crafted packets destined to the PAPI (Aruba Networks AP Management protocol) UDP port (8211) of access-pointsor controllers in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility Controllers version(s): 2.1.0.1, 2.2.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below ; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04072en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04072en_us
CVE: CVE-2020-24637
Published: 2020-12-11
Description: Two vulnerabilities in ArubaOS GRUB2 implementation allows for an attacker to bypass secureboot. Successful exploitation of this vulnerability this could lead to remote compromise of system integrity by allowing an attacker to load an untrusted or modified kernel in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility Controllers version(s): 2.1.0.1, 2.2.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below ; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below.
CVSS Score: 7.2 (HIGH)
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04072en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04072en_us
CVE: CVE-2020-25191
Published: 2020-12-11
Description: Incorrect permissions are set by default for an API entry-point of a specific service, allowing a non-authenticated user to trigger a function that could reboot the CompactRIO (Driver versions prior to 20.5) remotely.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732, CWE-732
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-338-01; https://us-cert.cisa.gov/ics/advisories/icsa-20-338-01
CVE: CVE-2020-25838
Published: 2020-12-11
Description: Unauthorized disclosure of sensitive information vulnerability in Micro Focus Filr product. Affecting all 3.x and 4.x versions. The vulnerability could be exploited to disclose unauthorized sensitive information.
CVSS Score: 6.5 (MEDIUM)
References: https://softwaresupport.softwaregrp.com/doc/KM03767186; https://softwaresupport.softwaregrp.com/doc/KM03767186
CVE: CVE-2020-26409
Published: 2020-12-11
Description: A DOS vulnerability exists in Gitlab CE/EE >=10.3, <13.4.7,>=13.5, <13.5.5,>=13.6, <13.6.2 that allows an attacker to trigger uncontrolled resource by bypassing input validation in markdown fields.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20, CWE-400
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26409.json; https://gitlab.com/gitlab-org/gitlab/-/issues/259626; https://hackerone.com/reports/990461
CVE: CVE-2020-24440
Published: 2020-12-11
Description: Adobe Prelude version 9.0.1 (and earlier) is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.0 (HIGH)
CWE: CWE-427, CWE-427
References: https://helpx.adobe.com/security/products/prelude/apsb20-70.html; https://helpx.adobe.com/security/products/prelude/apsb20-70.html
CVE: CVE-2020-24447
Published: 2020-12-11
Description: Adobe Lightroom Classic version 10.0 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.0 (HIGH)
CWE: CWE-427
References: https://helpx.adobe.com/security/products/lightroom/apsb20-74.html; https://helpx.adobe.com/security/products/lightroom/apsb20-74.html
CVE: CVE-2020-9301
Published: 2020-12-11
Description: Nolan Ray from Apple Information Security identified a security vulnerability in Spinnaker, all versions prior to version 1.23.4, 1.22.4 or 1.21.5. The vulnerability exists within the handling of SpEL expressions that allows an attacker to read and write arbitrary files within the orca container via authenticated HTTP POST requests.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2020-006.md; https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2020-006.md
CVE: CVE-2020-13357
Published: 2020-12-11
Description: An issue was discovered in Gitlab CE/EE versions >= 13.1 to <13.4.7, >= 13.5 to <13.5.5, and >= 13.6 to <13.6.2 allowed an unauthorized user to access the user list corresponding to a feature flag in a project.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13357.json; https://gitlab.com/gitlab-org/gitlab/-/issues/241132; https://hackerone.com/reports/962408
CVE: CVE-2020-13520
Published: 2020-12-11
Description: An out of bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 reconstructs paths from binary USD files. A specially crafted malformed file can trigger an out of bounds memory modification which can result in remote code execution. To trigger this vulnerability, victim needs to access an attacker-provided malformed file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://support.apple.com/kb/HT212011; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1120; https://support.apple.com/kb/HT212011
CVE: CVE-2020-13530
Published: 2020-12-11
Description: A denial-of-service vulnerability exists in the Ethernet/IP server functionality of the EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A large number of network requests in a small span of time can cause the running program to stop. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-910, CWE-672
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1143; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1143
CVE: CVE-2020-13556
Published: 2020-12-11
Description: An out-of-bounds write vulnerability exists in the Ethernet/IP server functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A specially crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1170; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1170
CVE: CVE-2020-26408
Published: 2020-12-11
Description: A limited information disclosure vulnerability exists in Gitlab CE/EE from >= 12.2 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2 that allows an attacker to view limited information in user's private profile
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26408.json; https://gitlab.com/gitlab-org/gitlab/-/issues/33563; https://hackerone.com/reports/703894
CVE: CVE-2020-26412
Published: 2020-12-11
Description: Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics starting in GitLab EE 13.2 before 13.6.2.
CVSS Score: 3.1 (LOW)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26412.json; https://gitlab.com/gitlab-org/gitlab/-/issues/228670; https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26412.json
CVE: CVE-2020-26413
Published: 2020-12-11
Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 13.6.2. Information disclosure via GraphQL results in user email being unexpectedly visible.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26413.json; https://gitlab.com/gitlab-org/gitlab/-/issues/244275; https://hackerone.com/reports/972355
CVE: CVE-2020-26415
Published: 2020-12-11
Description: Information about the starred projects for private user profiles was exposed via the GraphQL API starting from 12.2 via the REST API. This affects GitLab >=12.2 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-862
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26415.json; https://gitlab.com/gitlab-org/gitlab/-/issues/277337; https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26415.json
CVE: CVE-2020-26416
Published: 2020-12-11
Description: Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms via Rails logs. This affects versions >=8.4 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-532
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26416.json; https://gitlab.com/gitlab-org/gitlab/-/issues/244495; https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26416.json
CVE: CVE-2020-26417
Published: 2020-12-11
Description: Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership. This affects versions >=13.6 to <13.6.2, >=13.5 to <13.5.5, and >=13.1 to <13.4.7.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26417.json; https://gitlab.com/gitlab-org/gitlab/-/issues/282539; https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26417.json