CVE-2020-8795 - In GitLab Enterprise Edition (EE) 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users

HIGH

In GitLab Enterprise Edition (EE) 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users

Published Feb 17, 2020

7.5

HIGH

CVSS 3.1

EPSS 1.16%

In GitLab Enterprise Edition (EE) 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users.

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
https://about.gitlab.com/releases/2020/02/13/critical-security-release-gitlab-12-dot-7-dot-6-released/		x_refsource_CONFIRMRelease NotesVendor Advisory
https://about.gitlab.com/releases/categories/releases/		x_refsource_MISCRelease NotesVendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Feb 17, 2020

Updated Aug 4, 2024

Reserved Feb 7, 2020

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a