CVE report
CVE-2020-26413medium
Gitlab CE/EE 13.4 - 13.6.2 - Information Disclosure
Events 90d
166
Distinct IPs
72
Severity
medium
CISA KEV
Not listed
Detection signature
An event counts toward CVE-2020-26413 when its URL path contains any of these (case-insensitive). This is what our matching is based on.
- · /api/graphql
Pre-disclosure activity
all early actors →Analysing probe history around the publication date…
Recent probe volume (last 7 days)
peak: 52 events/dayeventsdistinct IPs
Downloads & integrations
Top sources probing for CVE-2020-26413
- 179.43.163.269 eventsSwitzerland· Private Layer INC
- 207.154.197.1135 eventsGermany· DigitalOcean, LLC
- 167.172.158.1285 eventsUnited States· DigitalOcean, LLC
- 167.99.181.2495 eventsCanada· DigitalOcean, LLC
- 139.59.136.1844 eventsGermany· DigitalOcean, LLC
- 167.172.232.1424 eventsUnited States· DigitalOcean, LLC
- 209.38.208.2024 eventsGermany· DigitalOcean, LLC
- 46.101.1.2254 eventsUnited Kingdom· DigitalOcean, LLC
- 64.226.65.1604 eventsGermany· DigitalOcean, LLC
- 38.127.60.254 eventsUnited States· Enzu Inc
- 159.65.18.1973 eventsUnited Kingdom· DigitalOcean, LLC
- 143.110.217.2443 eventsCanada· DigitalOcean, LLC
- 207.154.212.473 eventsGermany· DigitalOcean, LLC
- 164.92.244.1323 eventsGermany· DigitalOcean, LLC
- 206.81.12.1873 eventsUnited States· DigitalOcean, LLC
- 157.245.105.1073 eventsIndia· DigitalOcean, LLC
- 68.183.9.163 eventsThe Netherlands· DigitalOcean, LLC
- 139.59.132.83 eventsGermany· DigitalOcean, LLC
- 165.227.39.2353 eventsCanada· DigitalOcean, LLC
- 206.81.24.2273 eventsGermany· DigitalOcean, LLC
- 206.189.233.363 eventsUnited States· DigitalOcean, LLC
- 64.225.75.2463 eventsThe Netherlands· DigitalOcean, LLC
- 206.189.95.2323 eventsSingapore· DigitalOcean, LLC
- 157.230.19.1403 eventsGermany· DigitalOcean, LLC
- 64.23.218.2083 eventsUnited States· DigitalOcean, LLC
- 209.97.180.83 eventsUnited Kingdom· DigitalOcean, LLC
- 142.93.129.1903 eventsThe Netherlands· DigitalOcean, LLC
- 138.68.82.232 eventsGermany· DigitalOcean, LLC
- 134.122.28.882 eventsUnited States· DigitalOcean, LLC
- 146.190.63.2482 eventsUnited States· DigitalOcean, LLC
Top networks the attempts come from
- AS14061 DigitalOcean, LLC64 IPs · 146 ev
- AS51852 Private Layer INC1 IPs · 9 ev
- AS18978 Enzu Inc1 IPs · 4 ev
- AS150436 Byteplus Pte. Ltd.1 IPs · 2 ev
- AS211590 Bucklog SARL1 IPs · 1 ev
- AS200373 3xK Tech GmbH1 IPs · 1 ev
- AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED1 IPs · 1 ev
- AS8075 Microsoft Corporation1 IPs · 1 ev
- AS45102 Alibaba (US) Technology Co., Ltd.1 IPs · 1 ev
Fingerprints of the clients exploiting this
The HTTP (JA4H) and TLS (JA4) fingerprints seen on these attempts. Click one to see the whole population that carries it.
ja4h: po11nn0700_1cd7ee9bf867ja4h: po11nn0500_b4ba55311b46ja4h: he11nn0200_3ed38b250d3dja4h: po11nn0600_36b368ee4bc7ja4h: po11nn07en_421b215d3788ja4h: ge11nn0300_042112399351ja4: t13i3111h2_e8f1e7e78f70_b26ce05bbdd6ja4: t13i131300_f57a46bbacb6_47d1ff9c9a84ja4: t13i3111h2_e8f1e7e78f70_8d633dac7124ja4: t13i091000_f91f431d341e_ab7e3b40a677ja4: t13i131000_f57a46bbacb6_ab7e3b40a677
Sample request paths observed
- /api/graphql