VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 10, 2020· Updated Aug 4, 2024

Information leakage in Gerrit

CVE-2020-8919

Description

An information leak vulnerability exists in Gerrit versions prior to 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where a missing access check on the branch REST API allows an attacker with only the default set of priviledges to read all other user's personal account data as well as sub-trees with restricted access.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Geraked/Gerritllm-fuzzy2 versions
    >= 2.15 < 2.15.21, >= 2.16 < 2.16.25, >= 3.0 < 3.0.15, >= 3.1 < 3.1.10, >= 3.2 < 3.2.5+ 1 more
    • (no CPE)range: >= 2.15 < 2.15.21, >= 2.16 < 2.16.25, >= 3.0 < 3.0.15, >= 3.1 < 3.1.10, >= 3.2 < 3.2.5
    • (no CPE)range: stable

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.