VULNERABILITY INTELLIGENCE

CVE-2020-10081

CVSS score6.5 MEDIUM
EPSS probability0.95%
CISA KEVNot currently listed
Published2020-03-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

GitLab before 12.8.2 has Incorrect Access Control. It was internally discovered that the LFS import process could potentially be used to incorrectly access LFS objects not owned by the user.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references