CVE-2020-10085: 
GitLab vulnerability analysis and mitigation

CVE-2020-10085 is an information disclosure vulnerability affecting GitLab versions 12.3.5 through 12.8.1. The vulnerability was discovered and reported by security researcher @xanbanx, and was publicly disclosed on March 4, 2020. The issue specifically involved a widget view that was inadvertently exposing private merge request titles (GitLab Release).

The vulnerability stems from a design flaw in GitLab's widget view implementation where private merge request titles were being exposed through a particular view interface. This information disclosure vulnerability affects GitLab installations running versions 12.3.5 through 12.8.1 (CVE Mitre).

The vulnerability could lead to the unauthorized disclosure of private merge request titles, potentially exposing sensitive information about private projects and their development activities (GitLab Release).

The vulnerability was patched in GitLab version 12.8.2. GitLab strongly recommends that all installations running affected versions should be upgraded to the latest version as soon as possible to mitigate this security risk (GitLab Release).