NetSight
IP …
high7.5

CVE-2020-13270

Missing permission check on fork relation creation in GitLab CE/EE 11.3 and later through 13.0.1 allows guest users to create a fork relation on restricted pub…

Impact

Missing permission check on fork relation creation in GitLab CE/EE 11.3 and later through 13.0.1 allows guest users to create a fork relation on restricted public projects via API

Affected products

VendorProductAffected versions
GitlabGitlab
from 11.3.0 before 11.9.8
from 11.3.0 before 12.9.8
from 12.10.0 before 12.10.7
from 13.0.0 before 13.0.1

Weakness classification

CWE-862

References