CVE-2020-10079

—

CVSS 3.1

5.3 medium

EPSS

<1%p56

Published

Mar 13, 2020 (Mar 13, 2020)

Modified

Jun 17, 2026

Description

GitLab 7.10 through 12.8.1 has Incorrect Access Control. Under certain conditions where users should have been required to configure two-factor authentication, it was not being required.

Vendors: gitlab
Products: gitlab
Weakness: CWE-306
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.