CVE-2020-10081: Medium severity gitlab vulnerability
Published Mar 13, 2020
·Updated
GitLab before 12.8.2 has Incorrect Access Control. It was internally discovered that the LFS import process could potentially be used to incorrectly access LFS objects not owned by the user.
Affected Software
2 affected components
GitLab GitLab<=12.8.1
GitLab GitLab<=12.8.1
Event History
Mar 13, 2020
CVE Published
via MITRE·04:54 PM
Data Sourced
via MITRE·04:54 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-10081?
CVE-2020-10081 is classified as a medium severity vulnerability due to incorrect access control in the LFS import process.
2
How do I fix CVE-2020-10081?
To mitigate CVE-2020-10081, upgrade your GitLab installation to version 12.8.2 or later.
3
What versions of GitLab are affected by CVE-2020-10081?
CVE-2020-10081 affects GitLab versions prior to 12.8.2, specifically up to 12.8.1.
4
What is the impact of CVE-2020-10081?
The impact of CVE-2020-10081 allows users to potentially access LFS objects that they do not own.
5
Is there a workaround for CVE-2020-10081?
There are no known workarounds for CVE-2020-10081, and updating to the latest version is recommended.