PT-2020-13482 · Gitlab · Gitlab

CVE-2020-13341

·

Published

2020-10-12

·

Updated

2024-03-06

CVSS v3.1

4.9

Medium

VectorAV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions GitLab versions prior to 13.2.10 GitLab versions prior to 13.3.7 GitLab versions prior to 13.4.2
Description An issue has been discovered in GitLab where an insufficient permission check allows an attacker with a developer role to perform various deletions.
Recommendations For versions prior to 13.2.10, update to version 13.2.10 or later. For versions prior to 13.3.7, update to version 13.3.7 or later. For versions prior to 13.4.2, update to version 13.4.2 or later.

Fix

Type Confusion

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BIT-GITLAB-2020-13341
CVE-2020-13341

Affected Products

Gitlab