Medium severity5.5NVD Advisory· Published Oct 8, 2020· Updated Jun 17, 2026
CVE-2020-13339
CVE-2020-13339
Description
An issue has been discovered in GitLab affecting all versions before 13.2.10, 13.3.7 and 13.4.2: XSS in SVG File Preview. Overall impact is limited due to the current user only being impacted.
Affected products
5cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 3 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: <13.2.10
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: <13.2.10
- (no CPE)range: >=12.10, <13.2.10
- (no CPE)range: <13.2.10, <13.3.7, <13.4.2
Patches
Vulnerability mechanics
References
3- gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13339.jsonnvdVendor Advisory
- hackerone.com/reports/758653nvdPermissions RequiredThird Party Advisory
- gitlab.com/gitlab-org/gitlab/-/issues/118477nvdBroken Link
News mentions
0No linked articles in our index yet.