Lucene search
GitLabCVELIST:CVE-2020-13337HistoryOct 02, 2020 - 7:15 p.m.
CVE-2020-13337
2020-10-0219:15:50
GitLab
www.cve.org
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
6.4 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
22.7%
An issue has been discovered in GitLab affecting versions from 12.10 to 12.10.12 that allowed for a stored XSS payload to be added as a group name.
CNA Affected
[
{
"product": "GitLab",
"vendor": "GitLab",
"versions": [
{
"status": "affected",
"version": ">=12.10, <12.10.13"
}
]
}
]Related
cve
cve
CVE-2020-13337
2020-10-02 20:15:12
ubuntucve
ubuntucve
CVE-2020-13337
2020-10-02 00:00:00
debiancve
debiancve
CVE-2020-13337
2020-10-02 20:15:12
prion
prion
Cross site scripting
2020-10-02 20:15:00
osv
osv
CVE-2020-13337
2020-10-02 20:15:12
BIT-gitlab-2020-13337
2024-03-06 11:21:52
nessus
nessus
GitLab 12.10 < 12.10.13 (CVE-2020-13337)
2024-05-17 00:00:00
nvd
nvd
CVE-2020-13337
2020-10-02 20:15:12
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
6.4 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
22.7%
Related for CVELIST:CVE-2020-13337