CVE-2020-26408: GitLab

Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days.

A limited information disclosure vulnerability exists in Gitlab CE/EE from >= 12.2 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2 that allows an attacker to view limited information in user's private profile

Affected products

• GitLab GitLab: from 12.2.0, before 13.4.7 (fixed in 13.4.7); from 13.5.0, before 13.5.5 (fixed in 13.5.5); from 13.6.0, before 13.6.2 (fixed in 13.6.2)

Published 2020-12-11. Last modified 2026-06-17.