CVE-2020-10981

Published: 08 April 2020

GitLab EE/CE 9.0 to 12.9 allows a maintainer to modify other maintainers' pipeline trigger descriptions within the same project.

Priority

CVSS 3 base score: 4.3

Status

Package	Release	Status
gitlab Launchpad, Ubuntu, Debian	Upstream	Needs triage


	Ubuntu 20.04 LTS (Focal Fossa)	Does not exist
	Ubuntu 18.04 LTS (Bionic Beaver)	Does not exist
	Ubuntu 16.04 LTS (Xenial Xerus)	Not vulnerable (code not present)
	Ubuntu 14.04 ESM (Trusty Tahr)	Does not exist

Author	Note
msalvatore	Affects GitLab EE/CE 9.0 and later.

Canonical is offering Ubuntu 14.04 Extended Security Maintenance (ESM) for security fixes and essential packages.