CVE-2020-10088: High severity gitlab vulnerability
Published Mar 13, 2020
·Updated
GitLab 12.5 through 12.8.1 has Insecure Permissions. Depending on particular group settings, it was possible for invited groups to be given the incorrect permission level.
Affected Software
2 affected components
GitLab GitLab>=12.5.0<=12.8.1
GitLab GitLab>=12.5.0<=12.8.1
Event History
Mar 13, 2020
CVE Published
via MITRE·04:29 PM
Data Sourced
via MITRE·04:29 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-10088?
CVE-2020-10088 is classified with high severity due to potential misuse of permissions.
2
How do I fix CVE-2020-10088?
To fix CVE-2020-10088, it is recommended to upgrade GitLab to version 12.8.2 or later.
3
What versions of GitLab are affected by CVE-2020-10088?
CVE-2020-10088 affects GitLab versions from 12.5.0 to 12.8.1.
4
What type of vulnerability is CVE-2020-10088?
CVE-2020-10088 is an Insecure Permissions vulnerability that allows incorrect permission levels to be assigned.
5
Who is at risk from CVE-2020-10088?
Users of GitLab who are operating within the affected versions may be at risk of inadvertently granted permissions.