CVE-2019-20145 (NVD)

2020-01-13

An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 11.4 through 12.6.1. It has Incorrect Access Control.

Products Gitlab
Type Missing Authorization (CWE-862)
First patch - None (likely due to unavailable code)
Links https://about.gitlab.com/blog/categories/releases/
https://about.gitlab.com/releases/2020/01/02/security-release-gitlab-12-6-2-released/