Design/Logic Flaw

2020-06-1922:15:00

PRIOn knowledge base

www.prio-n.com

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.1%

JSON

User email verification bypass in GitLab CE/EE 12.5 and later through 13.0.1 allows user to bypass email verification

CPENameOperatorVersion
gitlabge12.10.0
gitlablt12.10.7
gitlabge12.10.0
gitlablt12.10.7
gitlabeq13.0.0
gitlabeq13.0.0
gitlabge12.5.0
gitlablt12.9.8
gitlabge12.5.0
gitlablt12.9.8

Name	Operator	Version
gitlab	ge	12.10.0
gitlab	lt	12.10.7
gitlab	ge	12.10.0
gitlab	lt	12.10.7
gitlab	eq	13.0.0
gitlab	eq	13.0.0
gitlab	ge	12.5.0
gitlab	lt	12.9.8
gitlab	ge	12.5.0
gitlab	lt	12.9.8

References

gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13265.json

gitlab.com/gitlab-org/gitlab/-/issues/121664

hackerone.com/reports/762568