CVE-2020-13314

Published: Sep 14, 2020Modified: Nov 21, 2024

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Omniauth endpoint allowed a malicious user to submit content to be displayed back to the user within error messages.

Affected (6)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	From 13.1.0 to 13.1.10
Gitlab Gitlab	From 13.2.0 to 13.2.8
Gitlab Gitlab	From 13.3.0 to 13.3.4
Gitlab Gitlab	From 13.1.0 to 13.1.10
Gitlab Gitlab	From 13.2.0 to 13.2.8
Gitlab Gitlab	From 13.3.0 to 13.3.4