Lucene search

K
prionPRIOn knowledge basePRION:CVE-2020-13350
HistoryNov 17, 2020 - 6:15 p.m.

Cross site request forgery (csrf)

2020-11-1718:15:00
PRIOn knowledge base
www.prio-n.com
1

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.2%

CSRF in runner administration page in all versions of GitLab CE/EE allows an attacker who’s able to target GitLab instance administrators to pause/resume runners. Affected versions are >=13.5.0, <13.5.2,>=13.4.0, <13.4.5,<13.3.9.

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.2%