← All advisories

High severity8.7NVD Advisory· Published Oct 8, 2020· Updated Jun 17, 2026

CVE-2020-13340

CVE-2020-13340

Description

An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2: Stored XSS in CI Job Log

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

GitLab Inc./GitLab4 versions
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 3 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: <13.2.10
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: <13.2.10
- (no CPE)range: <13.2.10, <13.3.7, <13.4.2
- (no CPE)range: >=12.4, <13.2.10
GitLab Inc./CI Job Logllm-create
Range: <13.2.10, <13.3.7, <13.4.2
osv-coords
pkg:bitnami/gitlab
Range: >= 12.4.0, < 13.2.10

Patches

Vulnerability mechanics

References

3

gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13340.jsonnvdThird Party Advisory
hackerone.com/reports/950190nvdPermissions RequiredThird Party Advisory
gitlab.com/gitlab-org/gitlab/-/issues/233473nvdBroken Link

News mentions

0

No linked articles in our index yet.