Medium severity6.5NVD Advisory· Published Mar 27, 2020· Updated Jun 17, 2026

CVE-2020-10955

Description

GitLab EE/CE 11.1 through 12.9 is vulnerable to parameter tampering on an upload feature that allows an unauthorized user to read content available under specific folders.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GitLab Inc./GitLab2 versions
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 1 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=11.1.0,<12.9.1
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=11.1.0,<12.9.1
Debian/linux
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
GitLab/GitLab EE/CEdescription
GitLab Inc./GitLab EE and CEllm-fuzzy
Range: 11.1 - 12.9
osv-coords
pkg:bitnami/gitlab
Range: >= 11.1.0, < 12.9.1

Patches

Vulnerability mechanics

References

about.gitlab.com/releases/2020/03/26/security-release-12-dot-9-dot-1-released/nvdRelease NotesVendor Advisory
about.gitlab.com/releases/categories/releases/nvdRelease NotesVendor Advisory
www.debian.org/security/2020/dsa-4691nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000