PT-2020-13460 · Gitlab · Gitlab
CVSS v3.1
4.3
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
GitLab versions prior to 13.1.2
GitLab versions prior to 13.0.8
GitLab versions prior to 12.10.13
Description
An issue has been discovered in GitLab where a missing permission check allows adding time spent on an issue.
Recommendations
For versions prior to 13.1.2, update to version 13.1.2 or later.
For versions prior to 13.0.8, update to version 13.0.8 or later.
For versions prior to 12.10.13, update to version 12.10.13 or later.
Exploit
Fix
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Gitlab