← All advisories

High severity7.7NVD Advisory· Published Sep 30, 2020· Updated Jun 17, 2026

CVE-2020-13323

CVE-2020-13323

Description

A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be read via Todos

Affected products

4

GitLab Inc./GitLab3 versions
cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: >=8.5.0,<12.10.13
- (no CPE)range: >=8.5, <12.10.13
- (no CPE)range: <13.1
osv-coords
pkg:bitnami/gitlab
Range: >= 8.5.0, < 12.10.13

Patches

Vulnerability mechanics

References

2

gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13323.jsonnvdVendor Advisory
gitlab.com/gitlab-org/gitlab/-/issues/215175nvdBroken Link

News mentions

0

No linked articles in our index yet.