CVE-2020-7977

2020-02-0516:15:12

Google

osv.dev

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

36.2%

GitLab EE 8.8 and later through 12.7.2 has Insecure Permissions.

CPENameOperatorVersion
gitlabeq12.6.4-ee
gitlabeq12.6.1-ee
gitlabeq12.6.2-ee
gitlabeq12.6.0-ee
gitlabeq12.6.3-ee

Name	Operator	Version
gitlab	eq	12.6.4-ee
gitlab	eq	12.6.1-ee
gitlab	eq	12.6.2-ee
gitlab	eq	12.6.0-ee
gitlab	eq	12.6.3-ee

References

about.gitlab.com/blog/categories/releases/

about.gitlab.com/releases/2020/01/30/security-release-gitlab-12-7-4-released/