PT-2020-13429 · Gitlab · Gitlab

CVE-2020-13288

·

Published

2020-08-12

·

Updated

2024-03-06

CVSS v3.1

5.5

Medium

VectorAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
Name of the Vulnerable Software and Affected Versions GitLab versions prior to 13.0.12 GitLab versions prior to 13.1.6 GitLab versions prior to 13.2.3
Description A stored XSS issue exists in the CI/CD Jobs page, allowing for potential exploitation.
Recommendations For versions prior to 13.0.12, update to version 13.0.12 or later. For versions prior to 13.1.6, update to version 13.1.6 or later. For versions prior to 13.2.3, update to version 13.2.3 or later.

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BIT-GITLAB-2020-13288
CVE-2020-13288

Affected Products

Gitlab