{"id":9929,"date":"2020-01-24T01:53:45","date_gmt":"2020-01-24T01:53:45","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=9929"},"modified":"2026-04-17T18:07:50","modified_gmt":"2026-04-17T18:07:50","slug":"gitlab-ee-ce-information-disclosure-vulnerability-cve-2020-6832-security-alert","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/gitlab-ee-ce-information-disclosure-vulnerability-cve-2020-6832-security-alert\/","title":{"rendered":"GitLab EE \/ CE Information Disclosure Vulnerability (CVE-2020-6832) Security Alert"},"content":{"rendered":"


\n<\/p>\n

Vulnerability Description<\/strong><\/h2>\n

On January 14th, GitLab officially released an important version update security notice, fixing a vulnerability (CVE-2020-6832) that could lead to private project inform-ation disclosure. GitLab is an open source project for a warehouse management system. It uses Git as a code management tool and a web service built on it.<\/p>\n

When using GitLab’s project import function, this vulnerability can be exploit to obtain sensitive information from private projects, and relevant users are requested to protect it; more vulnerability information is expected to be announced on the official issue tracking system in about 30 days.<\/p>\n

References:<\/p>\n

https:\/\/about.gitlab.com\/releases\/2020\/01\/13\/critical-security-release-gitlab-12-dot-6-dot-4-released\/<\/p>\n

Scope of Impact<\/strong><\/h2>\n

Affected Versions<\/strong><\/p>\n