High severity7.5NVD Advisory· Published Apr 22, 2020· Updated Jun 17, 2026
CVE-2020-11506
CVE-2020-11506
Description
An issue was discovered in GitLab 10.7.0 and later through 12.9.2. A Workhorse bypass could lead to job artifact uploads and file disclosure (Exposure of Sensitive Information) via request smuggling.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 2 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=10.7.9,<12.7.9
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=10.7.0,<12.7.9
- (no CPE)range: 10.7.0 - 12.9.2
- GitLab/GitLabdescription
Patches
Vulnerability mechanics
References
2- about.gitlab.com/blog/categories/releases/nvdRelease NotesVendor Advisory
- about.gitlab.com/releases/2020/04/14/critical-security-release-gitlab-12-dot-9-dot-3-released/nvdVendor Advisory
News mentions
0No linked articles in our index yet.