CVE-2020-10081: GitLab

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

GitLab before 12.8.2 has Incorrect Access Control. It was internally discovered that the LFS import process could potentially be used to incorrectly access LFS objects not owned by the user.

Affected products

• GitLab GitLab: up to and including 12.8.1

Published 2020-03-13. Last modified 2026-06-17.