CVE-2020-10086
published 2020-03-13CVE-2020-10086: GitLab 10.4 through 12.8.1 allows Directory Traversal. A particular endpoint was vulnerable to a directory traversal vulnerability, leading to arbitrary file…
PriorityP432medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
EPSS
1.33%
67.6th percentile
GitLab 10.4 through 12.8.1 allows Directory Traversal. A particular endpoint was vulnerable to a directory traversal vulnerability, leading to arbitrary file read.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gitlab | < gitlab 12.6.8-3 (sid) | gitlab 12.6.8-3 (sid) |
| gitlab | gitlab | — | — |
| gitlab | gitlab | 10.4.0 – 12.8.1 | — |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
vendor_oracle7.3HIGH
vendor_debian5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-jg7j-6r85-5w9p: GitLab 10
ghsa_unreviewed·2022-05-24
CVE-2020-10086 [MEDIUM] GHSA-jg7j-6r85-5w9p: GitLab 10
GitLab 10.4 through 12.8.1 allows Directory Traversal. A particular endpoint was vulnerable to a directory traversal vulnerability, leading to arbitrary file read.
Oracle
Oracle Oracle Database Server Risk Matrix: Spatial Studio (Apache Commons Beanutils) — CVE-2019-10086
vendor_oracle·2020-07-15·CVSS 7.3
CVE-2019-10086 [HIGH] Oracle Oracle Database Server Risk Matrix: Spatial Studio (Apache Commons Beanutils) — CVE-2019-10086
Oracle Oracle Database Server Risk Matrix: Spatial Studio (Apache Commons Beanutils) vulnerability
CVE: CVE-2019-10086
CVSS: 0.0
Protocol: None
Remote exploit: No
Affected versions: Local
Advisory: cpujul2020 (JUL 2020)
Oracle
Oracle Oracle Construction and Engineering Risk Matrix: Admin (Apache Commons Beanutils) — CVE-2019-10086
vendor_oracle·2020-04-15·CVSS 7.3
CVE-2019-10086 [HIGH] Oracle Oracle Construction and Engineering Risk Matrix: Admin (Apache Commons Beanutils) — CVE-2019-10086
Oracle Oracle Construction and Engineering Risk Matrix: Admin (Apache Commons Beanutils) vulnerability
CVE: CVE-2019-10086
CVSS: 7.3
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpuapr2020 (APR 2020)
GitLab
CVE-2020-10086: GitLab 10.4 through 12.8.1 allows Directory Traversal. A particular endpoint was vulnerable to a directory traversal vulnerability, leading to arbitra
vendor_gitlab·2020-03-13·CVSS 5.3
CVE-2020-10086 [MEDIUM] CWE-22 CVE-2020-10086: GitLab 10.4 through 12.8.1 allows Directory Traversal. A particular endpoint was vulnerable to a directory traversal vulnerability, leading to arbitra
CVE-2020-10086: GitLab 10.4 through 12.8.1 allows Directory Traversal. A particular endpoint was vulnerable to a directory traversal vulnerability, leading to arbitrary file read.
Debian
CVE-2020-10086: gitlab - GitLab 10.4 through 12.8.1 allows Directory Traversal. A particular endpoint was...
vendor_debian·2020·CVSS 5.3
CVE-2020-10086 [MEDIUM] CVE-2020-10086: gitlab - GitLab 10.4 through 12.8.1 allows Directory Traversal. A particular endpoint was...
GitLab 10.4 through 12.8.1 allows Directory Traversal. A particular endpoint was vulnerable to a directory traversal vulnerability, leading to arbitrary file read.
Scope: local
sid: resolved (fixed in 12.6.8-3)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://about.gitlab.com/releases/2020/03/04/gitlab-12-dot-8-dot-2-released/https://about.gitlab.com/releases/2020/03/04/gitlab-12-dot-8-dot-2-released/index.htmlhttps://about.gitlab.com/releases/2020/03/04/gitlab-12-dot-8-dot-2-released/https://about.gitlab.com/releases/2020/03/04/gitlab-12-dot-8-dot-2-released/index.html
2020-03-13
Published