CVE-2020-8920
1 advisory.
Maven/com.google.gerrit:gerrit-plugin-api CVE-2020-8920: low
Information leak in Gerrit
Action: Upgrade com.google.gerrit:gerrit-plugin-api to 2.14.22 (2.14.x), 2.15.21 (2.15.x), 2.16.25 (2.16.x), 3.0.15 (3.0.x), 3.1.10 (3.1.x) or 3.2.5 (3.2.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.14.22 | - |
| 2.15.0 | 2.15.21 | - |
| 2.16.0 | 2.16.25 | - |
| 3.0.0 | 3.0.15 | - |
| 3.1.0 | 3.1.10 | - |
| 3.2.0 | 3.2.5 | - |
Fixed versions
| 2.14.22 | 2.15.21 | 2.16.25 | 3.0.15 | 3.1.10 | 3.2.5 |
Sources
- osv: GHSA-g5q2-cxgq-h2rw
- https://nvd.nist.gov/vuln/detail/CVE-2020-8920
- https://gerrit.googlesource.com/gerrit/+/45071d6977932bca5a1427c8abad24710fed2e33
- https://issues.gerritcodereview.com/issues/40012986
- https://www.gerritcodereview.com/2.14.html#21422
- https://www.gerritcodereview.com/2.15.html#21521
- https://www.gerritcodereview.com/2.16.html#21625
- https://www.gerritcodereview.com/3.0.html#3015
- https://www.gerritcodereview.com/3.1.html#3110
- https://www.gerritcodereview.com/3.2.html#325
CVE-2020-8920 · published · modified · JSON