high7.5
CVE-2020-13263
An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allow unauthorized user…
Impact
An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allow unauthorized users to impersonate as a maintainer to perform limited actions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitlab | Gitlab | from 9.5.0 before 12.9.8 from 12.10.0 before 12.10.7 Version 13.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13263.json
- https://gitlab.com/gitlab-org/gitlab/-/issues/211940
- https://hackerone.com/reports/819821
- https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13263.json
- https://gitlab.com/gitlab-org/gitlab/-/issues/211940
- https://hackerone.com/reports/819821