Low severity3.1NVD Advisory· Published Dec 11, 2020· Updated Jun 17, 2026
CVE-2020-26412
CVE-2020-26412
Description
Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics starting in GitLab EE 13.2 before 13.6.2.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*+ 2 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=13.2.0,<13.6.2
- (no CPE)range: <13.6.2
- (no CPE)range: >=13.2, <13.4.7
- Range: <13.6.2
Patches
Vulnerability mechanics
References
2- gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26412.jsonnvdVendor Advisory
- gitlab.com/gitlab-org/gitlab/-/issues/228670nvdBroken Link
News mentions
0No linked articles in our index yet.