CVE-2020-26405

HIGH · CVSS 7.1 EPSS 1.43%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-11-17 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-26405

Severity

HIGH

CVSS

7.1

EPSS

1.43%

GitLab

Original NVD Description

Path traversal vulnerability in package upload functionality in GitLab CE/EE starting from 12.8 allows an attacker to save packages in arbitrary locations. Affected versions are >=12.8, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2.