NetSight
IP …
medium6.1

CVE-2020-13271

A Stored Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code in the blobs API in all previous GitLab CE/EE versions through 1…

Impact

A Stored Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code in the blobs API in all previous GitLab CE/EE versions through 13.0.1

Affected products

VendorProductAffected versions
GitlabGitlab
before 12.9.8
from 12.10.0 before 12.10.7
from 13.0.0 before 13.0.1

Weakness classification

CWE-79

References