CVE-2020-8920

An information leak vulnerability exists in Gerrit versions prior to 2.14.22, 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where an overoptimization with the FilteredRepository wrapper skips the verification of access on All-Users repositories, allowing an attacker to get read access to all users' personal information associated with their accounts.

• CWE-285

• https://gerrit.googlesource.com/gerrit/+/45071d6977932bca5a1427c8abad24710fed2e33Issue Tracking, Patch, Vendor Advisory
• https://www.gerritcodereview.com/2.14.html#21422Release Notes, Vendor Advisory
• https://www.gerritcodereview.com/2.15.html#21521Release Notes, Vendor Advisory
• https://www.gerritcodereview.com/2.16.html#21625Release Notes, Vendor Advisory
• https://www.gerritcodereview.com/3.0.html#3014Release Notes, Vendor Advisory
• https://www.gerritcodereview.com/3.1.html#3110Release Notes, Vendor Advisory
• https://www.gerritcodereview.com/3.2.html#325Release Notes, Vendor Advisory
• https://gerrit.googlesource.com/gerrit/+/45071d6977932bca5a1427c8abad24710fed2e33Issue Tracking, Patch, Vendor Advisory
• https://www.gerritcodereview.com/2.14.html#21422Release Notes, Vendor Advisory
• https://www.gerritcodereview.com/2.15.html#21521Release Notes, Vendor Advisory
• https://www.gerritcodereview.com/2.16.html#21625Release Notes, Vendor Advisory
• https://www.gerritcodereview.com/3.0.html#3014Release Notes, Vendor Advisory
• https://www.gerritcodereview.com/3.1.html#3110Release Notes, Vendor Advisory
• https://www.gerritcodereview.com/3.2.html#325Release Notes, Vendor Advisory

Published

Dec 10, 2020

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-8911A padding oracle vulnerability exists in the AWS S3 Crypto S…5.6
• CVE-2020-8912A vulnerability in the in-band key negotiation exists in the…2.5
• CVE-2020-8913A local, arbitrary code execution vulnerability exists in th…8.8
• CVE-2020-8916A memory leak in Openthread's wpantund versions up to commit…5.5
• CVE-2020-8918An improperly initialized 'migrationAuth' value in Google's …7.1
• CVE-2020-8919An information leak vulnerability exists in Gerrit versions …3.5
• CVE-2020-8923An improper HTML sanitization in Dart versions up to and inc…6.1
• CVE-2020-8927A buffer overflow exists in the Brotli library versions prio…6.5
• CVE-2020-8929A mis-handling of invalid unicode characters in the Java imp…5.3
• CVE-2020-8933A vulnerability in Google Cloud Platform's guest-oslogin ver…7.8
• CVE-2020-8934The Site Kit by Google plugin for WordPress is vulnerable to…4.3
• CVE-2020-8935An arbitrary memory overwrite vulnerability in Asylo version…7.8