GitLab 12.6 < 13.0.12 / 13.1 < 13.1.10 / 13.2 < 13.2.8 / 13.3 < 13.3.4 (CVE-2020-13318)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A vulnerability was discovered in GitLab versions before 13.0.12, 13.1.10, 13.2.8 and 13.3.4. GitLabs EKS integration was vulnerable to a cross-account assume role attack. CVE-2020-13318 Note that...

CVE-2020-13318

GitLab EKS integration in affected versions prior to 13.0.12, 13.1.10, 13.2.8 and 13.3.4 is vulnerable to a cross-account assume role attack. This CVE (CVE-2020-13318) is described across multiple sources; no patch/version remediation is specified in the provided documents. The issue impacts the ...