Linux Distros Unpatched Vulnerability : CVE-2020-13340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2: Stored XSS in CI Job Log CVE-2020-13340 Note that Nessus reli...

GitLab 12.4 < 13.2.10 / 13.3 < 13.3.7 / 13.4 < 13.4.2 (CVE-2020-13340)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2: Stored XSS in CI Job Log CVE-2020-13340 Note that Nessus has not tested for this issue but has instea...

CVE-2020-13340

Removed by vendor...

CVE-2020-13340

CVE-2020-13340 affects GitLab versions prior to 13.2.10, 13.3.7, and 13.4.2, with a stored cross-site scripting (XSS) vulnerability in the CI Job Log. The root cause is a Stored XSS in the CI Job Log, enabling potentially malicious input to be reflected in logs. CVSS v3.1 base score is 8.7 (HIGH)...