CVE-2020-13316

Published: Sep 14, 2020Modified: Nov 21, 2024

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was not validating a Deploy-Token and allowed a disabled repository be accessible via a git command line.

Affected (6)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	From 13.1.0 to 13.1.10
Gitlab Gitlab	From 13.2.0 to 13.2.8
Gitlab Gitlab	From 13.3.0 to 13.3.4
Gitlab Gitlab	From 13.1.0 to 13.1.10
Gitlab Gitlab	From 13.2.0 to 13.2.8
Gitlab Gitlab	From 13.3.0 to 13.3.4