CVE Vulnerabilities

CVE-2020-13326

Published: Sep 30, 2020 | Modified: Nov 21, 2024
CVSS 3.x
4.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS 2.x
3.5 LOW
AV:N/AC:M/Au:S/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the restriction for Github project import could be bypassed.

Affected Software

NameVendorStart VersionEnd Version
GitlabGitlab11.8.0 (including)12.10.13 (excluding)
GitlabGitlab13.0.0 (including)13.0.8 (excluding)
GitlabGitlab13.1.0 (including)13.1.2 (excluding)
GitlabUbuntuesm-apps/xenial*
GitlabUbuntuxenial*

References