Servers and applications

CVE-2020-10074

GitLab 10.1 through 12.8.1 has Incorrect Access Control. A scenario was discovered in which a GitLab account could be taken over through an expired link.

Severity: Critical 9.8
Published: 13 Mar 2020
Last changed: 17 Jun 2026
Added to UpHeron: 21 Oct 2026
Sources: NVD

Affected software

Software	Affected versions
GitLabServers and applications · `cpe:a:gitlab:gitlab`	From 10.1.0 up to 12.8.1

References

NVD https://nvd.nist.gov/vuln/detail/CVE-2020-10074
CVE.org https://www.cve.org/CVERecord?id=CVE-2020-10074