CVE-2020-13327

published 2020-10-22

CVE-2020-13327: An issue has been discovered in GitLab Runner affecting all versions starting from 13.4.0 before 13.4.2, all versions starting from 13.3.0 before 13.3.7, all…

high 7.5 CVSS 3.1

AV N AC H PR L UI N S U C H I H A H

An issue has been discovered in GitLab Runner affecting all versions starting from 13.4.0 before 13.4.2, all versions starting from 13.3.0 before 13.3.7, all versions starting from 13.2.0 before 13.2.10. Insecure Runner Configuration in Kubernetes Environments

Affected

8 ranges

Vendor	Product	Version range	Fixed in
gitlab	gitlab	—	—
gitlab	gitlab_runner	—	—
gitlab	gitlab_runner	—	—
gitlab	gitlab_runner	—	—
gitlab	gitlab_runner	—	—
gitlab	runner	>= 13.2.0 < 13.2.10	13.2.10
gitlab	runner	>= 13.3.0 < 13.3.7	13.3.7
gitlab	runner	>= 13.4.0 < 13.4.2	13.4.2

CVSS provenance

nvd v3.1 7.5 HIGH CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

osv 7.5 HIGH