CVE-2020-13289

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4

Medium · published September 14, 2020

CVSS v3.1
5.4
EPSS
1%
Percentile
52.1
In the wild
Unconfirmed
What it is

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. In certain cases an invalid username could be accepted when 2FA is activated.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00687 · 52.1th percentile
Published
2020-09-14T18:45Z
EPSS history
Timeline
  • 14 SEP 18:45Z
    A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4
    cvelistv5