CVE-2020-13318

Published: Sep 14, 2020Modified: Nov 21, 2024

7.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Exploitability: 2.1 / Impact: 5.2

Source: NVD

Description

A vulnerability was discovered in GitLab versions before 13.0.12, 13.1.10, 13.2.8 and 13.3.4. GitLabs EKS integration was vulnerable to a cross-account assume role attack.

Affected (8)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	From 13.0.0 to 13.0.12
Gitlab Gitlab	From 13.1.0 to 13.1.10
Gitlab Gitlab	From 13.2.0 to 13.2.8
Gitlab Gitlab	From 13.3.0 to 13.3.4
Gitlab Gitlab	From 13.0.0 to 13.0.12
Gitlab Gitlab	From 13.1.0 to 13.1.10
Gitlab Gitlab	From 13.2.0 to 13.2.8
Gitlab Gitlab	From 13.3.0 to 13.3.4

References (4)

https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13318.json

Source: cve@gitlab.com

Vendor Advisory

https://gitlab.com/gitlab-org/gitlab/-/issues/228915

Source: cve@gitlab.com

Broken Link

https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13318.json

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://gitlab.com/gitlab-org/gitlab/-/issues/228915

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

Timeline

No history available yet.