Medium severity6.5NVD Advisory· Published Sep 30, 2020· Updated Jun 17, 2026
CVE-2020-13324
CVE-2020-13324
Description
A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the private activity of a user could be exposed via the API.
Affected products
4>=9.4, <12.10.13+ 2 more
- (no CPE)range: >=9.4, <12.10.13
- (no CPE)range: <13.1
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: >=9.4.0,<12.10.13
Patches
Vulnerability mechanics
References
2- gitlab.com/gitlab-org/gitlab/-/issues/24542nvdExploitVendor Advisory
- gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13324.jsonnvdVendor Advisory
News mentions
0No linked articles in our index yet.