NetSight
high7.2

CVE-2020-13322

A vulnerability was discovered in GitLab versions after 12.9.

Impact

A vulnerability was discovered in GitLab versions after 12.9. Due to improper verification of permissions, an unauthorized user can create and delete deploy tokens.

Affected products

VendorProductAffected versions
GitlabGitlab
from 12.9.0 before 12.10.13
from 13.0.0 before 13.0.8
from 13.1.0 before 13.1.2

Weakness classification

References