CVE-2020-13298

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4

High · published September 14, 2020

CVSS v3.1
7.2
EPSS
1%
Percentile
69.0
In the wild
Unconfirmed
What it is

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Conan package upload functionality was not properly validating the supplied parameters, which resulted in the limited files disclosure.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01242 · 69.0th percentile
Published
2020-09-14T21:44Z
EPSS history
Timeline
  • 14 SEP 21:44Z
    A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4
    cvelistv5