CVE-2020-5197 (NVD)

2020-01-13

An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 5.1 through 12.6.1. It has Incorrect Access Control.

Products Gitlab
Type Incorrect Authorization (CWE-863)
First patch - None (likely due to unavailable code)
Links https://about.gitlab.com/releases/2020/01/02/security-release-gitlab-12-6-2-released/
https://about.gitlab.com/blog/categories/releases/