Lucene search

GitLabCVELIST:CVE-2020-13279

HistoryJun 22, 2020 - 3:11 p.m.

CVE-2020-13279

2020-06-2215:11:56

GitLab

www.cve.org

8.6 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

36.4%

JSON

Client side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on user system

CNA Affected

[
  {
    "product": "gitlab-vscode-extension",
    "vendor": "GitLab",
    "versions": [
      {
        "status": "affected",
        "version": "<=2.2.0"
      }
    ]
  }
]

References

gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13279.json

gitlab.com/gitlab-org/gitlab-vscode-extension/-/issues/170

8.6 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

36.4%

JSON

Related for CVELIST:CVE-2020-13279