← All advisories

Medium severity6.5NVD Advisory· Published Apr 22, 2020· Updated Jun 17, 2026

CVE-2020-11649

CVE-2020-11649

Description

An issue was discovered in GitLab CE and EE 8.15 through 12.9.2. Members of a group could still have access after the group is deleted.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

GitLab/GitLab CE and EEdescription
GitLab Inc./GitLab3 versions
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 2 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=8.15.0,<12.7.9
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=8.15.0,<12.7.9
- (no CPE)range: 8.15 - 12.9.2
osv-coords
pkg:bitnami/gitlab
Range: >= 8.15.0, < 12.7.9

Patches

Vulnerability mechanics

References

2

about.gitlab.com/blog/categories/releases/nvdVendor Advisory
about.gitlab.com/releases/2020/04/14/critical-security-release-gitlab-12-dot-9-dot-3-released/nvdVendor Advisory

News mentions

0

No linked articles in our index yet.