An issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. It allows Information Disclosure. Non-member users who subscribe to notifications of an internal project with issue and repository restrictions will receive emails about restricted events.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gitlab | Gitlab | 8.1.0 (including) | 8.17.8 (including) |
| Gitlab | Gitlab | 9.0.0 (including) | 9.3.7 (including) |
| Gitlab | Gitlab | 10.0.0 (including) | 10.8.7 (including) |
| Gitlab | Gitlab | 11.0.0 (including) | 11.8.9 (excluding) |
| Gitlab | Gitlab | 11.9.0 (including) | 11.9.10 (excluding) |
| Gitlab | Gitlab | 11.10.0 (including) | 11.10.2 (including) |
| Gitlab | Gitlab | 11.10.0 (including) | 11.10.2 (excluding) |