VYPR
← All advisories
High severity7.1NVD Advisory· Published Sep 15, 2020· Updated Jun 17, 2026

CVE-2020-13303

CVE-2020-13303

Description

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Due to improper verification of permissions, an unauthorized user can access a private repository within a public project.

Affected products

6
  • GitLab Inc./GitLab4 versions
    cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 3 more
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=13.1.0,<13.1.10
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=13.1.0,<13.1.10
    • (no CPE)range: <13.1.10, <13.2.8, <13.3.4
    • (no CPE)range: >=1.0, <13.1.10
  • GitLab Inc./gitlab-org/gitlab-eellm-fuzzy
    Range: <13.1.10, <13.2.8, <13.3.4
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 1.0.0, < 13.1.10

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.