CVE-2020-10081

GitLab before 12.8.2 has Incorrect Access Control

published March 13, 2020

CVSS
—
EPSS
1%
Percentile
60.8
In the wild
Unconfirmed
What it is

GitLab before 12.8.2 has Incorrect Access Control. It was internally discovered that the LFS import process could potentially be used to incorrectly access LFS objects not owned by the user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00949 · 60.8th percentile
Published
2020-03-13T16:54Z
EPSS history
Timeline
  • 13 MAR 16:54Z
    GitLab before 12.8.2 has Incorrect Access Control
    cvelistv5