4 matches found
Linux Distros Unpatched Vulnerability : CVE-2020-13340
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2: Stored XSS in CI Job Log CVE-2020-13340 Note that Nessus reli...
GitLab 12.4 < 13.2.10 / 13.3 < 13.3.7 / 13.4 < 13.4.2 (CVE-2020-13340)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2: Stored XSS in CI Job Log CVE-2020-13340 Note that Nessus has not tested for this issue but has instea...
CVE-2020-13340
CVE-2020-13340 affects GitLab versions prior to 13.2.10, 13.3.7, and 13.4.2, with a stored cross-site scripting (XSS) vulnerability in the CI Job Log. The root cause is a Stored XSS in the CI Job Log, enabling potentially malicious input to be reflected in logs. CVSS v3.1 base score is 8.7 (HIGH)...
