CVE-2020-13294

2020-08-1014:15:12

Google

osv.dev

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.7%

In GitLab before 13.0.12, 13.1.6 and 13.2.3, access grants were not revoked when a user revoked access to an application.

CPENameOperatorVersion
gitlabeq13.2.1-ee
gitlabeq13.2.0-ee
gitlabeq13.2.2-ee

Name	Operator	Version
gitlab	eq	13.2.1-ee
gitlab	eq	13.2.0-ee
gitlab	eq	13.2.2-ee

References

gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13294.json

gitlab.com/gitlab-org/gitlab/-/issues/26147

hackerone.com/reports/469728