An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could result in disclosure of the build status. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6.
{
"cpe": [
"cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*"
],
"source": "CPE_FIELD",
"extracted_events": [
{
"introduced": "11.11.0"
},
{
"fixed": "11.11.7"
},
{
"introduced": "12.0.0"
},
{
"fixed": "12.0.4"
},
{
"introduced": "12.1.0"
},
{
"fixed": "12.1.2"
}
]
}