CVE-2020-8795: GitLab

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

In GitLab Enterprise Edition (EE) 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users.

Affected products

• GitLab GitLab: from 12.5.0, up to and including 12.7.5

Published 2020-02-17. Last modified 2026-06-17.