An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could result in disclosure of the build status. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6.
{
"versions": [
{
"introduced": "11.11.0"
},
{
"fixed": "11.11.7"
},
{
"introduced": "11.11.0"
},
{
"fixed": "11.11.7"
},
{
"introduced": "12.0.0"
},
{
"fixed": "12.0.4"
},
{
"introduced": "12.0.0"
},
{
"fixed": "12.0.4"
},
{
"introduced": "12.1.0"
},
{
"fixed": "12.1.2"
},
{
"introduced": "12.1.0"
},
{
"fixed": "12.1.2"
}
]
}