CVE-2020-10087

GitLab before 12.8.2 allows Information Disclosure. Badge images were not being proxied, causing mixed content warnings as well as leaking the IP address of the user.

packagechannelchannel versionpkg versionstatus
gitlab
nixos-18.03
2019-02-20 10:25:14 UTC (cb0e20)10.7.0vulnerable
2019-01-16 18:00:31 UTC (138f2c)10.7.0vulnerable
2018-12-09 06:05:37 UTC (b551f8)10.7.0vulnerable
2018-11-29 21:00:31 UTC (a18112)10.7.0vulnerable
2018-11-28 06:10:25 UTC (9c96d1)10.7.0vulnerable
2018-11-23 12:45:42 UTC (e64482)10.7.0vulnerable
2018-11-20 12:35:27 UTC (947247)10.7.0vulnerable
2018-11-16 21:00:27 UTC (263f7b)10.7.0vulnerable
2018-11-14 10:35:19 UTC (1d8470)10.7.0vulnerable
2018-11-05 13:10:34 UTC (21b7f5)10.7.0vulnerable
2018-11-02 08:50:28 UTC (0e614d)10.7.0vulnerable
2018-10-30 16:25:07 UTC (19fc6d)10.7.0vulnerable
2018-10-30 14:40:31 UTC (6f07d2)10.7.0vulnerable
2018-10-28 11:35:42 UTC (b4e3a4)10.7.0vulnerable
2018-10-15 12:50:34 UTC (5d19e3)10.7.0vulnerable
2018-10-13 20:20:17 UTC (e85e0c)10.7.0vulnerable
2018-10-13 09:40:17 UTC (d592f2)10.7.0vulnerable
2018-10-11 15:15:08 UTC (5a38f7)10.7.0vulnerable
2018-10-09 11:20:30 UTC (c56ede)10.7.0vulnerable
2018-10-05 13:25:12 UTC (862fb5)10.7.0vulnerable
2018-10-05 13:00:32 UTC (c4eddc)10.7.0vulnerable
2018-09-21 06:10:31 UTC (d16a7a)10.7.0vulnerable
2018-09-19 17:10:27 UTC (8edf56)10.7.0vulnerable
2018-09-18 17:55:38 UTC (305f13)10.7.0vulnerable
2018-09-16 07:30:36 UTC (01f5e7)10.7.0vulnerable
2018-09-13 15:30:12 UTC (5f59ab)10.7.0vulnerable
2018-09-08 09:20:09 UTC (45f52f)10.7.0vulnerable
2018-09-02 21:10:32 UTC (8b92a4)10.7.0vulnerable
2018-09-02 14:20:10 UTC (8c172c)10.7.0vulnerable
2018-09-01 13:55:20 UTC (a960b8)10.7.0vulnerable
2018-08-31 04:20:38 UTC (a37638)10.7.0vulnerable
2018-08-29 17:10:10 UTC (edd63e)10.7.0vulnerable
2018-08-24 19:10:30 UTC (fde201)10.7.0vulnerable
2018-08-23 23:50:20 UTC (f094fd)10.7.0vulnerable
2018-08-19 18:15:22 UTC (4df342)10.7.0vulnerable
2018-08-18 23:45:22 UTC (47b68d)10.7.0vulnerable
2018-08-17 21:25:22 UTC (a4e068)10.7.0vulnerable
2018-08-17 14:30:05 UTC (cd0cd9)10.7.0vulnerable
2018-08-16 13:20:15 UTC (c1ef96)10.7.0vulnerable
2018-08-16 08:30:34 UTC (8b4ed6)10.7.0vulnerable
2018-08-15 15:40:37 UTC (5b8a24)10.7.0vulnerable
2018-08-15 05:50:22 UTC (66bd47)10.7.0vulnerable
2018-08-14 17:35:19 UTC (9cbc73)10.7.0vulnerable
2018-08-13 09:25:26 UTC (10b979)10.7.0vulnerable
2018-08-13 03:20:34 UTC (89ff9f)10.7.0vulnerable
2018-08-12 04:35:15 UTC (bfeab2)10.7.0vulnerable
2018-08-12 00:00:33 UTC (190ec7)10.7.0vulnerable
2018-08-10 22:20:22 UTC (e42c07)10.7.0vulnerable
2018-08-10 17:05:22 UTC (2c3f9c)10.7.0vulnerable
2018-08-09 21:05:22 UTC (3af001)10.7.0vulnerable
2018-08-07 05:10:16 UTC (230f98)10.7.0vulnerable
2018-08-03 03:05:12 UTC (d0c868)10.7.0vulnerable
2018-08-02 12:45:41 UTC (18401b)10.7.0vulnerable
2018-08-02 06:10:24 UTC (0e55dd)10.7.0vulnerable
2018-08-01 00:55:32 UTC (a1299c)10.7.0vulnerable
2018-07-31 16:00:28 UTC (b74b1c)10.7.0vulnerable
2018-07-30 09:15:16 UTC (6115f4)10.7.0vulnerable
2018-07-20 17:40:08 UTC (d6c6c7)10.7.0vulnerable
2018-07-12 04:35:08 UTC (411cc5)10.7.0vulnerable
2018-07-10 08:10:12 UTC (aec217)10.7.0vulnerable
2018-07-10 03:15:29 UTC (5e10df)10.7.0vulnerable
2018-07-09 02:40:20 UTC (e930c6)10.7.0vulnerable
2018-07-08 17:55:36 UTC (de7ca4)10.7.0vulnerable
2018-07-08 10:25:33 UTC (298e17)10.7.0vulnerable
2018-07-04 20:00:25 UTC (56fad1)10.7.0vulnerable
2018-06-30 13:55:14 UTC (2f06e0)10.7.0vulnerable
2018-06-29 17:10:06 UTC (0a70d6)10.7.0vulnerable
2018-06-25 10:30:35 UTC (94d80e)10.7.0vulnerable
2018-06-23 08:30:21 UTC (91b286)10.7.0vulnerable
2018-06-21 23:25:24 UTC (68e02f)10.7.0vulnerable
2018-06-17 01:05:39 UTC (14c248)10.7.0vulnerable
2018-06-16 09:40:33 UTC (f3c913)10.7.0vulnerable
2018-06-14 21:57:20 UTC (08d245)10.7.0vulnerable
nixos-18.09
2018-12-14 15:00:47 UTC (7e8899)11.5.1vulnerable
2018-12-14 09:40:30 UTC (ea863c)11.5.1vulnerable
2018-12-12 04:50:30 UTC (4f3446)11.5.1vulnerable
2018-12-11 18:35:22 UTC (f55c7c)11.5.1vulnerable
2018-12-11 05:30:46 UTC (b144df)11.5.1vulnerable
2018-12-11 00:55:27 UTC (7b7d14)11.5.1vulnerable
2018-12-10 10:15:39 UTC (b352d4)11.5.1vulnerable
2018-12-09 15:40:40 UTC (1a4498)11.5.1vulnerable
2018-12-09 15:15:40 UTC (f006e8)11.5.1vulnerable
2018-12-07 19:05:30 UTC (135a7f)11.5.1vulnerable
2018-12-07 06:35:21 UTC (7795a7)11.5.1vulnerable
2018-12-06 20:25:30 UTC (2dc559)11.5.1vulnerable
2018-12-03 23:00:39 UTC (d45a0d)11.5.0vulnerable
2018-10-11 07:15:22 UTC (4dd9cd)11.3.0vulnerable
2018-10-10 16:15:30 UTC (8cfce9)11.3.0vulnerable
2018-10-10 03:00:34 UTC (59fe4c)11.3.0vulnerable
2018-10-09 20:05:32 UTC (de37b4)11.3.0vulnerable
2018-10-09 08:40:17 UTC (1ada6f)11.3.0vulnerable
2018-10-08 20:00:22 UTC (21293d)11.3.0vulnerable
2018-10-08 13:30:11 UTC (617607)11.3.0vulnerable
2018-10-06 23:30:25 UTC (299814)11.3.0vulnerable
2018-10-06 14:10:32 UTC (6a3f5b)11.3.0vulnerable
2018-10-04 13:05:14 UTC (6cbd1e)11.3.0vulnerable
2018-10-03 08:15:23 UTC (7f70eb)11.3.0vulnerable
2018-10-02 19:55:28 UTC (3e44d2)11.3.0vulnerable
2018-10-02 09:45:23 UTC (66fd61)11.3.0vulnerable
2018-10-02 01:05:40 UTC (10eec0)11.3.0vulnerable
2018-10-01 11:30:25 UTC (b550b7)11.3.0vulnerable
2018-10-01 08:35:23 UTC (0f1911)11.3.0vulnerable
2018-10-01 03:05:17 UTC (26537f)11.3.0vulnerable
2018-09-29 14:15:10 UTC (c922e2)11.3.0vulnerable
2018-09-28 06:20:12 UTC (376891)11.3.0vulnerable
2018-09-27 11:35:18 UTC (3c85e5)11.3.0vulnerable
2018-09-27 08:15:14 UTC (d26e83)11.3.0vulnerable
2018-09-26 15:15:11 UTC (29660a)11.3.0vulnerable
2018-09-26 03:35:36 UTC (391bf8)11.3.0vulnerable
2018-09-25 20:25:23 UTC (358326)11.3.0vulnerable
2018-09-25 15:25:44 UTC (69514d)11.3.0vulnerable
2018-09-24 12:35:11 UTC (e49665)10.8.0vulnerable
2018-09-21 09:35:13 UTC (ef450e)10.8.0vulnerable
2018-09-21 05:20:41 UTC (40d22a)10.8.0vulnerable
2018-09-15 00:45:23 UTC (9fa6a2)10.8.0vulnerable
2018-09-14 18:55:29 UTC (221ec6)10.8.0vulnerable
2018-09-12 22:40:23 UTC (32c008)10.8.0vulnerable
2018-09-12 08:15:39 UTC (8468a4)10.8.0vulnerable
2018-09-06 08:40:22 UTC (6f3bd5)10.8.0vulnerable
2018-09-06 03:15:12 UTC (a01552)10.8.0vulnerable
2018-09-05 18:45:13 UTC (dea9a0)10.8.0vulnerable
2018-09-03 23:20:16 UTC (c0bde6)10.8.0vulnerable
nixos-19.09
2019-11-08 22:50:25 UTC (d9a83d)12.4.1vulnerable
2019-11-08 07:25:13 UTC (d62852)12.4.1vulnerable
2019-11-07 13:45:22 UTC (821c7e)12.4.1vulnerable
nixos-20.03
2020-03-05 13:35:28 UTC (08bcfe)12.8.1vulnerable
nixos-unstable
2019-11-04 02:05:14 UTC (7827d3)12.4.1vulnerable
2018-12-14 18:35:35 UTC (44b02b)11.5.1vulnerable
2018-12-14 07:45:26 UTC (e0a4d1)11.5.1vulnerable
2018-12-13 17:40:40 UTC (562b7a)11.5.1vulnerable
2018-12-13 10:00:19 UTC (47f008)11.5.1vulnerable
2018-12-13 06:35:46 UTC (c556e6)11.5.1vulnerable
2018-12-12 05:20:26 UTC (ad3e91)11.5.1vulnerable
2018-12-11 15:30:23 UTC (644950)11.5.1vulnerable
2018-12-11 11:30:31 UTC (86344b)11.5.1vulnerable
2018-12-08 11:40:58 UTC (e85c1f)11.5.1vulnerable
2018-12-08 01:10:44 UTC (ca3f08)11.5.1vulnerable
2018-12-07 20:20:37 UTC (57c69f)11.5.1vulnerable
2018-12-07 00:45:17 UTC (c26dbe)11.5.1vulnerable
2018-12-03 19:45:42 UTC (7c73f5)11.5.0vulnerable
2018-10-05 04:00:11 UTC (0a7e25)11.3.0vulnerable
2018-10-04 07:55:22 UTC (f2b3bb)11.3.0vulnerable
2018-10-03 17:00:26 UTC (13b290)11.3.0vulnerable
2018-09-28 02:05:44 UTC (46651b)11.3.0vulnerable
2018-09-27 09:35:18 UTC (a70d3b)11.3.0vulnerable
2018-09-22 02:40:19 UTC (7df10f)10.8.0vulnerable
2018-09-21 13:25:18 UTC (06df7c)10.8.0vulnerable
2018-09-20 00:25:11 UTC (5664e6)10.8.0vulnerable
2018-09-15 16:35:21 UTC (218ce4)10.8.0vulnerable
2018-09-15 00:25:23 UTC (3c5788)10.8.0vulnerable
2018-09-13 09:20:13 UTC (56b9f6)10.8.0vulnerable
2018-09-06 12:05:23 UTC (ca2ba4)10.8.0vulnerable
2018-08-31 20:00:16 UTC (083220)10.8.0vulnerable
2018-08-24 12:50:09 UTC (7db611)10.8.0vulnerable
2018-08-17 11:25:34 UTC (8395f9)10.8.0vulnerable
2018-08-13 14:40:22 UTC (6afd19)10.8.0vulnerable
2018-08-13 09:35:37 UTC (a01850)10.8.0vulnerable
2018-08-12 20:15:12 UTC (4af9ee)10.8.0vulnerable
2018-08-12 02:10:25 UTC (b5b11e)10.8.0vulnerable
2018-08-11 19:25:19 UTC (bd4ef2)10.8.0vulnerable
2018-08-02 04:50:18 UTC (2428f5)10.8.0vulnerable
2018-07-31 15:45:38 UTC (7c5852)10.8.0vulnerable
2018-07-11 16:40:22 UTC (dae9cf)10.8.0vulnerable
2018-07-08 19:55:08 UTC (2a8a55)10.8.0vulnerable
2018-07-08 16:40:22 UTC (784f54)10.8.0vulnerable
2018-07-06 19:55:40 UTC (fda46a)10.8.0vulnerable
2018-07-02 04:50:18 UTC (be1461)10.8.0vulnerable
2018-07-01 00:20:18 UTC (687f5d)10.8.0vulnerable
2018-06-30 12:30:34 UTC (85497a)10.8.0vulnerable
2018-06-29 19:45:17 UTC (e686bd)10.8.0vulnerable
2018-06-22 13:15:24 UTC (a8c710)10.8.0vulnerable
2018-06-14 21:57:20 UTC (4b649a)10.8.0vulnerable