CVE-2020-10981: 
GitLab vulnerability analysis and mitigation

GitLab Enterprise Edition (EE) and Community Edition (CE) versions 9.0 to 12.9 contained a security vulnerability that allowed a project maintainer to modify other maintainers' pipeline trigger descriptions within the same project. The vulnerability was discovered and reported by @ashish_r_padelkar and was assigned the identifier CVE-2020-10981. The issue was disclosed on March 26, 2020, and was subsequently patched in GitLab versions 12.9.1, 12.8.8, and 12.7.8 (GitLab Release).

The vulnerability affected the pipeline trigger functionality in GitLab, where insufficient access controls allowed maintainers to modify trigger descriptions belonging to other maintainers within the same project. This security issue impacted both Enterprise Edition (EE) and Community Edition (CE) installations (NVD).

The vulnerability could lead to unauthorized modification of pipeline trigger descriptions, potentially causing confusion and disruption in project management by allowing maintainers to alter other maintainers' pipeline configurations (GitLab Release).

GitLab addressed this vulnerability by releasing security updates in versions 12.9.1, 12.8.8, and 12.7.8. Organizations running affected versions were strongly recommended to upgrade to one of these patched versions immediately to mitigate the security risk (GitLab Release).