CVE-2020-13289
published 2020-09-14CVE-2020-13289: A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. In certain cases an invalid username could be accepted when 2FA is…
PriorityP426medium5.4CVSS 3.1
AVNACLPRLUINSUCLILAN
EPSS
0.69%
48.1th percentile
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. In certain cases an invalid username could be accepted when 2FA is activated.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gitlab | < gitlab 13.2.8-1 (sid) | gitlab 13.2.8-1 (sid) |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | >= 13.1.0 < 13.1.10 | 13.1.10 |
| gitlab | gitlab | >= 13.2.0 < 13.2.8 | 13.2.8 |
| gitlab | gitlab | >= 13.3.0 < 13.3.4 | 13.3.4 |
CVSS provenance
nvdv3.15.4MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
nvdv2.05.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:N
osv5.4MEDIUM
vendor_debian5.4MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GitLab
CVE-2020-13289: A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. In certain cases an invalid username could be accepted when 2FA i
vendor_gitlab·2020-09-14·CVSS 5.4
CVE-2020-13289 [MEDIUM] CWE-306 CVE-2020-13289: A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. In certain cases an invalid username could be accepted when 2FA i
CVE-2020-13289: A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. In certain cases an invalid username could be accepted when 2FA is activated.
Debian
CVE-2020-13289: gitlab - A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13....
vendor_debian·2020·CVSS 5.4
CVE-2020-13289 [MEDIUM] CVE-2020-13289: gitlab - A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13....
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. In certain cases an invalid username could be accepted when 2FA is activated.
Scope: local
sid: resolved (fixed in 13.2.8-1)
GHSA
GHSA-q7qw-4c2f-p3rj: A vulnerability was discovered in GitLab versions before 13
ghsa_unreviewed·2022-05-24
CVE-2020-13289 [MEDIUM] GHSA-q7qw-4c2f-p3rj: A vulnerability was discovered in GitLab versions before 13
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. In certain cases an invalid username could be accepted when 2FA is activated.
OSV
CVE-2020-13289: A vulnerability was discovered in GitLab versions before 13
osv·2020-09-14·CVSS 5.4
CVE-2020-13289 [MEDIUM] CVE-2020-13289: A vulnerability was discovered in GitLab versions before 13
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. In certain cases an invalid username could be accepted when 2FA is activated.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-09-14
Published