Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Ashish R Padelkar

#51559of 53,633
4.3Total CVSS
Vulnerabilities · 1
PT-2020-12466
4.3
2020-04-08
Gitlab · Gitlab Ce/Ee · CVE-2020-10981
**Name of the Vulnerable Software and Affected Versions** GitLab EE/CE versions 9.0 through 12.9 **Description** The issue allows a maintainer to modify other maintainers' pipeline trigger descriptions within the same project. **Recommendations** For GitLab EE/CE versions 9.0 through 12.9, consider restricting access to pipeline trigger descriptions to prevent unauthorized modifications until a fix is available. As a temporary workaround, consider disabling the ability for maintainers to edit pipeline trigger descriptions within the same project.