Lucene search

[email protected]NVD:CVE-2020-13263

HistoryJun 19, 2020 - 11:15 p.m.

CVE-2020-13263

2020-06-1923:15:10

CWE-863

[email protected]

web.nvd.nist.gov

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

61.3%

JSON

An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allow unauthorized users to impersonate as a maintainer to perform limited actions.

Affected configurations

NVD

Node

gitlabgitlabRange9.5.0–12.9.8community

gitlabgitlabRange9.5.0–12.9.8enterprise

gitlabgitlabRange12.10.0–12.10.7community

gitlabgitlabRange12.10.0–12.10.7enterprise

gitlabgitlabMatch13.0.0community

gitlabgitlabMatch13.0.0enterprise

References

gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13263.json

gitlab.com/gitlab-org/gitlab/-/issues/211940

hackerone.com/reports/819821

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

61.3%

JSON

Related for NVD:CVE-2020-13263

prion1 cve1 ubuntucve1 cvelist1 debiancve1 nessus1 osv2