GitLab 8.3 through 12.8.1 allows Information Disclosure. It was possible for certain non-members to access the Contribution Analytics page of a private group.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Gitlab |
Gitlab |
8.3.0 (including) |
12.8.1 (including) |
References