NetSight
medium6.5

CVE-2020-13312

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.

Impact

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab OAuth endpoint was vulnerable to brute-force attacks through a specific parameter.

Affected products

VendorProductAffected versions
GitlabGitlab
from 13.1.0 before 13.1.10
from 13.2.0 before 13.2.8
from 13.3.0 before 13.3.4

Weakness classification

References