CVE-2020-15525: GitLab

Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days.

GitLab EE 11.3 through 13.1.2 has Incorrect Access Control because of the Maven package upload endpoint.

Affected products

• GitLab GitLab: from 11.3.0, up to and including 13.1.2

Published 2020-07-07. Last modified 2026-06-17.