NetSight
IP …
high7.5

CVE-2020-13272

OAuth flow missing verification checks CE/EE 12.3 and later through 13.0.1 allows unverified user to use OAuth authorization code flow

Impact

OAuth flow missing verification checks CE/EE 12.3 and later through 13.0.1 allows unverified user to use OAuth authorization code flow

Affected products

VendorProductAffected versions
GitlabGitlab
from 12.3.0 before 12.9.8
from 12.10.0 before 12.10.7
Version 13.0.0

Weakness classification

CWE-345

References