Skip to content
OpenAdvisories
Unscored CVE-2020-12275 EUVD-2020-4588GHSA-m6m2-gm49-gp5r

GitLab 12.6 through 12.9 is vulnerable to a privilege escalation that allows an external user to create a personal snippet through the API.

Published Apr 29, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Package: gitlab Ecosystem: Ubuntu

Description

GitLab 12.6 through 12.9 is vulnerable to a privilege escalation that allows an external user to create a personal snippet through the API.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS gitlab No fix yet —

References