CVE Vulnerabilities

CVE-2020-13298

Published: Sep 14, 2020 | Modified: Jul 21, 2021
CVSS 3.x
5.8
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Conan package upload functionality was not properly validating the supplied parameters, which resulted in the limited files disclosure.

Affected Software

Name Vendor Start Version End Version
Gitlab Gitlab * 13.1.10 (excluding)
Gitlab Gitlab 13.2.0 (including) 13.2.8 (excluding)
Gitlab Gitlab 13.3.0 (including) 13.3.4 (excluding)
Gitlab Ubuntu esm-apps/xenial *
Gitlab Ubuntu upstream *
Gitlab Ubuntu xenial *

References