PT-2020-13462 · Gitlab · Gitlab
CVSS v3.1
8.3
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L |
Name of the Vulnerable Software and Affected Versions
GitLab versions prior to 13.1
Description
A vulnerability was discovered that allows username format restrictions to be bypassed, enabling the addition of html tags.
Recommendations
For versions prior to 13.1, update to version 13.1 or later to resolve the issue.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Gitlab