CVE-2020-10083

9.1

CRITICALCVSS v3

Published

March 13, 2020

CVSS v2

6.4 MEDIUM

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

GitLab 12.7 through 12.8.1 has Insecure Permissions. Under certain conditions involving groups, project authorization changes were not being applied.

NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.

>= 12.7.0, <= 12.8.1NVD

NPMsemantic-release plugin to publish a GitLab release

>= 12.7.0, <= 12.8.1NVD

GitHub

:fox_face: semantic-release plugin to publish a GitLab release

>= 12.7.0, <= 12.8.1NVD

Python Package IndexGet GitLab user Details

>= 12.7.0, <= 12.8.1NVD

Crates.ioGitlab API client.

>= 12.7.0, <= 12.8.1NVD

RubyGemsRuby client and CLI for GitLab API

>= 12.7.0, <= 12.8.1NVD

GitHubRuby wrapper and CLI for the GitLab REST API

>= 12.7.0, <= 12.8.1NVD