CVE-2020-13313

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4

Medium · published September 14, 2020

CVSS v3.1
4.3
EPSS
1%
Percentile
61.9
In the wild
Unconfirmed
What it is

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. An unauthorized project maintainer could edit the subgroup badges due to the lack of authorization control.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00981 · 61.9th percentile
Published
2020-09-14T19:40Z
EPSS history
Timeline
  • 14 SEP 19:40Z
    A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4
    cvelistv5