CVE-2020-13339

2020-10-0813:51:33

GitLab

www.cve.org

5.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L

0.001 Low

EPSS

Percentile

38.9%

JSON

An issue has been discovered in GitLab affecting all versions before 13.2.10, 13.3.7 and 13.4.2: XSS in SVG File Preview. Overall impact is limited due to the current user only being impacted.

CNA Affected

[
  {
    "product": "GitLab",
    "vendor": "GitLab",
    "versions": [
      {
        "status": "affected",
        "version": ">=12.10, <13.2.10"
      },
      {
        "status": "affected",
        "version": ">=13.3, <13.3.7"
      },
      {
        "status": "affected",
        "version": ">=13.4, <13.4.2"
      }
    ]
  }
]