Medium severity6.1NVD Advisory· Published Jun 10, 2020· Updated Jun 17, 2026
CVE-2020-13269
CVE-2020-13269
Description
A Reflected Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code on the Static Site Editor in GitLab CE/EE 12.10 and later through 13.0.1
Affected products
6cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 2 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=12.10.0,<12.10.7
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=12.10.0,<12.10.7
- (no CPE)range: >=12.10, <12.10.7
- Range: >=12.10 <=13.0.1
- Range: >=12.10 <=13.0.1
Patches
Vulnerability mechanics
References
3- gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13269.jsonnvdVendor Advisory
- gitlab.com/gitlab-org/gitlab/-/issues/216528nvdBroken LinkVendor Advisory
- hackerone.com/reports/864356nvdPermissions RequiredThird Party Advisory
News mentions
0No linked articles in our index yet.