CVE-2020-13340

An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2: Stored XSS in CI Job Log

High · published October 8, 2020

Patch now

High probability of exploitation

CVSS calls it high at 8.7. It sits in the 99.3th percentile for exploit probability.

CVSS v3.1
8.7
EPSS
67%
Percentile
99.3
In the wild
Unconfirmed
What it is

An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2: Stored XSS in CI Job Log

The record
Technical detail
CVSS v3.1
8.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.66748 · 99.3th percentile
Published
2020-10-08T13:46Z
EPSS history
Timeline
  • 08 OCT 13:46Z
    An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2: Stored XSS in CI Job Log
    cvelistv5