CVE-2020-13276

User is allowed to set an email as a notification email even without verifying the new email in all previous GitLab CE/EE versions through 13.0.1...

GitLab < 12.9.8 (CVE-2020-13276)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - User is allowed to set an email as a notification email even without verifying the new email in all previous GitLab CE/EE versions through 13.0.1 CVE-2020-13276 Note that Nessus has not tested for thi...