PT-2020-13461 · Gitlab · Gitlab

Vaib25Vicky + 1 · Published 2020-09-29 · Updated 2024-03-06 · CVE-2020-13320

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions GitLab versions prior to 12.10.13

Description An issue has been discovered that allowed a project member with limited permissions to view the project security dashboard.

Recommendations For versions prior to 12.10.13, update to version 12.10.13 or later to resolve the issue.

Exploit

Fix

Related Identifiers

BIT-GITLAB-2020-13320

CVE-2020-13320

Affected Products

Gitlab

References · 8

• 🔥 https://gitlab.com/gitlab-org/gitlab/-/issues/215044 · Exploit
• https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13320.json · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-13320 · Security Note
• https://osv.dev/vulnerability/BIT-gitlab-2020-13320 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-13320 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-13320 · Security Note
• https://osv.dev/vulnerability/CVE-2020-13320 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-13320 · Vendor Advisory