Low severity3.5NVD Advisory· Published Dec 10, 2020· Updated Jun 17, 2026

CVE-2020-8919

Description

An information leak vulnerability exists in Gerrit versions prior to 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where a missing access check on the branch REST API allows an attacker with only the default set of priviledges to read all other user's personal account data as well as sub-trees with restricted access.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Google/Gerrit
cpe:2.3:a:google:gerrit:*:*:*:*:*:*:*:*
Range: >=2.15.0,<2.15.21
Geraked/Gerritllm-create2 versions
<2.15.21, <2.16.25, <3.0.15, <3.1.10, <3.2.5+ 1 more
- (no CPE)range: <2.15.21, <2.16.25, <3.0.15, <3.1.10, <3.2.5
- (no CPE)range: stable

Patches

Vulnerability mechanics

References

gerrit.googlesource.com/gerrit/+/0532fb876cb86bc091a91f78e6f28fff9e39ca65nvdIssue TrackingPatchVendor Advisory
www.gerritcodereview.com/2.15.htmlnvdRelease NotesVendor Advisory
www.gerritcodereview.com/2.16.htmlnvdRelease NotesVendor Advisory
www.gerritcodereview.com/3.0.htmlnvdRelease NotesVendor Advisory
www.gerritcodereview.com/3.1.htmlnvdRelease NotesVendor Advisory
www.gerritcodereview.com/3.2.htmlnvdRelease NotesVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.227
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000