CVE-2020-10981 — Improper Input Validation in Gitlab

CWE-20 — Improper Input Validation4 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
0.1%
top 77.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Debian GitlabGitlabGitlab EE
Timeline
PublishedApr 8
Latest updateMay 24

Description

GitLab EE/CE 9.0 to 12.9 allows a maintainer to modify other maintainers' pipeline trigger descriptions within the same project.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages4 packages

▶debiandebian/gitlab< gitlab 13.2.3-2 (sid)
▶NVDgitlab/gitlab9.0.0 — 12.9
▶gitlabgitlab/gitlab

🔴Vulnerability Details

1
GHSA
GHSA-r42x-m65m-82x8: GitLab EE/CE 9↗2022-05-24
▶

📋Vendor Advisories

2
GitLab
CVE-2020-10981: GitLab EE/CE 9.0 to 12.9 allows a maintainer to modify other maintainers' pipeline trigger descriptions within the same project.↗2020-04-08
▶
Debian
CVE-2020-10981: gitlab - GitLab EE/CE 9.0 to 12.9 allows a maintainer to modify other maintainers' pipeli...↗2020
▶