High severity7.2NVD Advisory· Published Sep 30, 2020· Updated Jun 17, 2026
CVE-2020-13322
CVE-2020-13322
Description
A vulnerability was discovered in GitLab versions after 12.9. Due to improper verification of permissions, an unauthorized user can create and delete deploy tokens.
Affected products
4>=12.9, <12.10.13+ 2 more
- (no CPE)range: >=12.9, <12.10.13
- (no CPE)range: >12.9
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: >=12.9.0,<12.10.13
Patches
Vulnerability mechanics
References
2- gitlab.com/gitlab-org/gitlab/-/issues/212469nvdExploitVendor Advisory
- gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13322.jsonnvdVendor Advisory
News mentions
0No linked articles in our index yet.