CVE-2020-10083

Critical

GitLab 12.7 through 12.8.1 has Insecure Permissions. Under certain conditions involving groups, project authorization changes were not…

mitre·CWE-281·Published 2020-03-13

CVSS

9.1

EPSS

0.01

KEV

Exploits

cve.orgen

149 chars

GitLab 12.7 through 12.8.1 has Insecure Permissions. Under certain conditions involving groups, project authorization changes were not being applied.

NVDen

149 chars

GitLab 12.7 through 12.8.1 has Insecure Permissions. Under certain conditions involving groups, project authorization changes were not being applied.

GitLab versiones 12.7 hasta 12.8.1, presenta Permisos No Seguros. Bajo determinadas condiciones que involucran a los grupos, no están siendo aplicados los cambios de autorización de proyectos.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.4	10.0	4.9	AV:N/AC:L/Au:N/C:P/I:P/A:N
3.1	Primary	NVD	9.1	3.9	5.2	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N