PT-2020-20284 · Gitlab · Gitlab Ce/Ee+1

Published 2020-02-17 · Updated 2024-03-06 · CVE-2020-8795

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions GitLab Enterprise Edition (EE) versions 12.5.0 through 12.7.5

Description The issue allows project access to unauthorized users when a group is shared with another group.

Recommendations For GitLab Enterprise Edition (EE) versions 12.5.0 through 12.7.5, update to a version that contains a fix for this issue to prevent unauthorized project access.

Fix

Related Identifiers

BIT-GITLAB-2020-8795

CVE-2020-8795

Affected Products

Gitlab

Gitlab Ce/Ee

References · 6

• https://osv.dev/vulnerability/BIT-gitlab-2020-8795 · Vendor Advisory
• https://about.gitlab.com/releases/2020/02/13/critical-security-release-gitlab-12-dot-7-dot-6-released · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-8795 · Vendor Advisory
• https://about.gitlab.com/releases/categories/releases · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8795 · Security Note
• https://t.me/cvenotify/1080 · Telegram Post