CVE-2020-13286

For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server Side Request Forgery

Medium · published August 13, 2020

CVSS v3.1
6.4
EPSS
1%
Percentile
54.3
In the wild
Unconfirmed
What it is

For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server Side Request Forgery.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00745 · 54.3th percentile
Published
2020-08-13T13:30Z
EPSS history
Timeline
  • 13 AUG 13:30Z
    For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server Side Request Forgery
    cvelistv5