← All advisories

Unrated severityNVD Advisory· Published Oct 2, 2020· Updated Aug 4, 2024

CVE-2020-13337

CVE-2020-13337

Description

An issue has been discovered in GitLab affecting versions from 12.10 to 12.10.12 that allowed for a stored XSS payload to be added as a group name.

Affected products

3

GitLab Inc./GitLabllm-fuzzy2 versions
>=12.10, <=12.10.12+ 1 more
- (no CPE)range: >=12.10, <=12.10.12
- (no CPE)range: >=12.10, <12.10.13
osv-coords
pkg:bitnami/gitlab
Range: >= 12.10.0, < 12.10.13

Patches

Vulnerability mechanics

References

2

gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13337.jsonmitrex_refsource_CONFIRM
gitlab.com/gitlab-org/gitlab/-/issues/199049mitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.