CVE catalog
CVE-2020-10087
UBUNTU-CVE-2020-10087
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 1.17% · Oct 27, 2026
GitLab before 12.8.2 allows Information Disclosure. Badge images were not being proxied, causing mixed content warnings as well as leaking the IP address of the user.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | gitlab | 16.04 | 8.4.3+dfsg-9 | vulnerable |
| Ubuntu | gitlab | 16.04 | 8.4.3+dfsg-12 | vulnerable |
| Ubuntu | gitlab | 16.04 | 8.5.8+dfsg-5 | vulnerable |
Fixed-version evidence
OpenFactory catalog packages
No matching packages in this catalog.
Observed: