CVE-2020-12275

GitLab 12.6 through 12.9 is vulnerable to a privilege escalation that allows an external user to create a personal snippet through the API...

CVE-2020-12275

GitLab 12.6–12.9 are affected by a privilege-escalation flaw that lets an external user create a personal snippet via the API. The vulnerability is evidenced across multiple sources (NVD/NVDA, OSV, CNVD, CVE listing) with CVSS approx. 5.0–5.3 (I:LOW, A:N, Privileges: NONE). Remedy: upgrade to Git...