CVE Vulnerabilities

CVE-2020-13298

Published: Sep 14, 2020 | Modified: Jul 21, 2021
CVSS 3.x
5.8
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Conan package upload functionality was not properly validating the supplied parameters, which resulted in the limited files disclosure.

Affected Software

Name Vendor Start Version End Version
Gitlab Gitlab * 13.1.10 (excluding)
Gitlab Gitlab 13.2.0 (including) 13.2.8 (excluding)
Gitlab Gitlab 13.3.0 (including) 13.3.4 (excluding)

References