Medium severity4.3NVD Advisory· Published Jun 9, 2020· Updated Jun 17, 2026
CVE-2020-13266
CVE-2020-13266
Description
Insecure authorization in Project Deploy Keys in GitLab CE/EE 12.8 and later through 13.0.1 allows users to update permissions of other users' deploy keys under certain conditions
Affected products
6cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 2 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=12.8,<=13.0.1
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=12.8,<=13.0.1
- (no CPE)range: >=12.8, <12.9.8
- Range: >=12.8 and <=13.0.1
- Range: >=12.8 and <=13.0.1
Patches
Vulnerability mechanics
References
2- gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13266.jsonnvdThird Party Advisory
- gitlab.com/gitlab-org/gitlab/-/issues/208449nvdBroken Link
News mentions
0No linked articles in our index yet.