← All advisories

High severity7.2NVD Advisory· Published Oct 2, 2020· Updated Jun 17, 2026

CVE-2020-13337

CVE-2020-13337

Description

An issue has been discovered in GitLab affecting versions from 12.10 to 12.10.12 that allowed for a stored XSS payload to be added as a group name.

Affected products

5

GitLab Inc./GitLab4 versions
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 3 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=12.10.0,<12.10.12
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=12.10.0,<12.10.12
- (no CPE)range: 12.10 - 12.10.12
- (no CPE)range: >=12.10, <12.10.13
osv-coords
pkg:bitnami/gitlab
Range: >= 12.10.0, < 12.10.13

Patches

Vulnerability mechanics

References

2

gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13337.jsonnvdThird Party Advisory
gitlab.com/gitlab-org/gitlab/-/issues/199049nvdBroken Link

News mentions

0

No linked articles in our index yet.