medium6.5
CVE-2020-13296
An issue has been discovered in GitLab affecting versions >=10.7 <13.0.14, >=13.1.0 <13.1.8, >=13.2.0 <13.2.6.
Impact
An issue has been discovered in GitLab affecting versions >=10.7 <13.0.14, >=13.1.0 <13.1.8, >=13.2.0 <13.2.6. Improper Access Control for Deploy Tokens
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitlab | Gitlab | through 10.7 from 13.0.0 before 13.0.14 from 13.1.0 before 13.1.8 from 13.2.0 before 13.2.6 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13296.json
- https://gitlab.com/gitlab-org/gitlab/-/issues/235996
- https://hackerone.com/reports/957459
- https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13296.json
- https://gitlab.com/gitlab-org/gitlab/-/issues/235996
- https://hackerone.com/reports/957459