PT-2020-13484 · Gitlab · Gitlab

Published 2020-10-06 · Updated 2024-03-06 · CVE-2020-13343

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GitLab versions 11.2 and later

Description An issue has been discovered in GitLab that allows unauthorized users to view custom project templates.

Recommendations For GitLab versions 11.2 and later, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

BIT-GITLAB-2020-13343

CVE-2020-13343

Affected Products

Gitlab

References · 9

• 🔥 https://hackerone.com/reports/689314 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-13343 · Security Note
• https://osv.dev/vulnerability/BIT-gitlab-2020-13343 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-13343 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-13343 · Security Note
• https://osv.dev/vulnerability/CVE-2020-13343 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-13343 · Vendor Advisory
• https://gitlab.com/gitlab-org/gitlab/-/issues/14861 · Note
• https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13343.json · Note