CVE-2020-13293

2020-08-1014:15:12

Google

osv.dev

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

40.4%

In GitLab before 13.0.12, 13.1.6 and 13.2.3 using a branch with a hexadecimal name could override an existing hash.

CPENameOperatorVersion
gitlabeq13.2.1-ee
gitlabeq13.2.0-ee
gitlabeq13.2.2-ee

Name	Operator	Version
gitlab	eq	13.2.1-ee
gitlab	eq	13.2.0-ee
gitlab	eq	13.2.2-ee

References

gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13293.json

gitlab.com/gitlab-org/gitlab/-/issues/202690

hackerone.com/reports/790634