Medium severity4.8NVD Advisory· Published Sep 30, 2020· Updated Jun 17, 2026
CVE-2020-13328
CVE-2020-13328
Description
An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. GitLab was vulnerable to a stored XSS by using the PyPi files API.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: >=12.0.0,<12.10.13
- (no CPE)range: <13.1.2, <13.0.8, <12.10.13
- (no CPE)range: >=12.0, <12.10.13
Patches
Vulnerability mechanics
References
2- gitlab.com/gitlab-org/gitlab/-/issues/215640nvdExploitVendor Advisory
- gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13328.jsonnvdVendor Advisory
News mentions
0No linked articles in our index yet.