CVE-2020-13290

In GitLab before 13.0.12, 13.1.6, and 13.2.3, improper access control was used on the Applications page

High · published August 12, 2020

CVSS v3.1
7.5
EPSS
1%
Percentile
65.7
In the wild
Unconfirmed
What it is

In GitLab before 13.0.12, 13.1.6, and 13.2.3, improper access control was used on the Applications page

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.01112 · 65.7th percentile
Published
2020-08-12T14:24Z
EPSS history
Timeline
  • 12 AUG 14:24Z
    In GitLab before 13.0.12, 13.1.6, and 13.2.3, improper access control was used on the Applications page
    cvelistv5