CVE-2020-13343 — Resource Exposure in Gitlab

CWE-668 — Resource Exposure5 documents5 sources

Severity

8.8HIGHNVD

EPSS

0.1%

top 66.58%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Debian Gitlab Gitlab

Timeline

PublishedOct 6

Latest updateMay 24

Description

An issue has been discovered in GitLab affecting all versions starting from 11.2. Unauthorized Users Can View Custom Project Template

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages4 packages

▶debiandebian/gitlab< gitlab 13.2.10-1 (sid)

▶NVDgitlab/gitlab11.2.0 — 13.4.3

▶CVEListV5gitlab/gitlab>=11.2, <13.2.10, >=13.3.0, <13.3.7, >=13.4.0, <13.4.2+2

▶gitlabgitlab/gitlab

🔴Vulnerability Details

GHSA

GHSA-5x78-2px4-46jf: An issue has been discovered in GitLab affecting all versions starting from 11↗2022-05-24

▶

OSV

CVE-2020-13343: An issue has been discovered in GitLab affecting all versions starting from 11↗2020-10-06

▶

📋Vendor Advisories

GitLab

CVE-2020-13343: An issue has been discovered in GitLab affecting all versions starting from 11.2. Unauthorized Users Can View Custom Project Template↗2020-10-06

▶

Debian

CVE-2020-13343: gitlab - An issue has been discovered in GitLab affecting all versions starting from 11.2...↗2020

▶