Lucene search

K
osvGoogleOSV:CVE-2020-13350
HistoryNov 17, 2020 - 6:15 p.m.

CVE-2020-13350

2020-11-1718:15:12
Google
osv.dev
5

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.1%

CSRF in runner administration page in all versions of GitLab CE/EE allows an attacker who’s able to target GitLab instance administrators to pause/resume runners. Affected versions are >=13.5.0, <13.5.2,>=13.4.0, <13.4.5,<13.3.9.

CPENameOperatorVersion
gitlabeq13.5.1-ee
gitlabeq13.5.0-ee

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.1%