Lucene search

K
osvGoogleOSV:CVE-2020-26407
HistoryDec 10, 2020 - 6:15 a.m.

CVE-2020-26407

2020-12-1006:15:13
Google
osv.dev
1

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.9%

A XSS vulnerability exists in Gitlab CE/EE from 12.4 before 13.4.7, 13.5 before 13.5.5, and 13.6 before 13.6.2 that allows an attacker to perform cross-site scripting to other users via importing a malicious project

CPENameOperatorVersion
gitlabeq13.6.0-ee
gitlabeq13.6.1-ee

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.9%