CVE-2020-13341

An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2

Medium · published October 12, 2020

CVSS v3.1
4.9
EPSS
1%
Percentile
67.5
In the wild
Unconfirmed
What it is

An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2. Insufficient permission check allows attacker with developer role to perform various deletions.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01183 · 67.5th percentile
Published
2020-10-12T13:20Z
EPSS history
Timeline
  • 12 OCT 13:20Z
    An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2
    cvelistv5