Medium severity4.3NVD Advisory· Published Sep 30, 2020· Updated Jun 17, 2026
CVE-2020-13319
CVE-2020-13319
Description
An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. Missing permission check for adding time spent on an issue.
Affected products
4cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: <12.10.13
- (no CPE)range: <13.1.2, <13.0.8, <12.10.13
- (no CPE)range: >=8.16, <12.10.13
Patches
Vulnerability mechanics
References
3- gitlab.com/gitlab-org/gitlab/-/issues/201806nvdExploitVendor Advisory
- gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13319.jsonnvdVendor Advisory
- hackerone.com/reports/755188nvdPermissions Required
News mentions
0No linked articles in our index yet.