GitLab < 12.10.13 (CVE-2020-13321)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A vulnerability was discovered in GitLab versions prior to 13.1. Username format restrictions could be bypassed allowing for html tags to be added. CVE-2020-13321 Note that Nessus has not tested for...

Format string

A vulnerability was discovered in GitLab versions prior to 13.1. Username format restrictions could be bypassed allowing for html tags to be added...

CVE-2020-13321

CVE-2020-13321 affects GitLab versions prior to 13.1 where username format restrictions can be bypassed, allowing HTML tags to be added. This is caused by insufficient validation of usernames, per multiple connected sources. Impact is partial confidentiality/integrity exposure as per CVSS metrics...