CVE-2020-13331 — Cross-site Scripting in Gitlab

CWE-79 — Cross-site Scripting5 documents5 sources

Severity

5.4MEDIUMNVD

EPSS

0.1%

top 68.71%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Gitlab Debian Gitlab

Timeline

PublishedSep 30

Latest updateMay 24

Description

An issue has been discovered in GitLab affecting versions prior to 12.10.13. GitLab was vulnerable to a stored XSS by in the Wiki pasges.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NExploitability: 2.3 | Impact: 2.7

Affected Packages4 packages

▶NVDgitlab/gitlab< 12.10.13

▶debiandebian/gitlab< gitlab 13.2.3-2 (sid)

▶CVEListV5gitlab/gitlab<12.10.13

▶gitlabgitlab/gitlab

🔴Vulnerability Details

GHSA

GHSA-qp45-rpvf-p5q7: An issue has been discovered in GitLab affecting versions prior to 12↗2022-05-24

▶

OSV

CVE-2020-13331: An issue has been discovered in GitLab affecting versions prior to 12↗2020-09-30

▶

📋Vendor Advisories

GitLab

CVE-2020-13331: An issue has been discovered in GitLab affecting versions prior to 12.10.13. GitLab was vulnerable to a stored XSS by in the Wiki pasges.↗2020-09-30

▶

Debian

CVE-2020-13331: gitlab - An issue has been discovered in GitLab affecting versions prior to 12.10.13. Git...↗2020

▶