CVE-2020-13348

An issue has been discovered in GitLab EE affecting all versions starting from 10.2

Medium · published November 17, 2020

CVSS v3.1
5.7
EPSS
1%
Percentile
56.1
In the wild
Unconfirmed
What it is

An issue has been discovered in GitLab EE affecting all versions starting from 10.2. Required CODEOWNERS approval could be bypassed by targeting a branch without the CODEOWNERS file. Affected versions are >=10.2, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00799 · 56.1th percentile
Published
2020-11-17T18:11Z
EPSS history
Timeline
  • 17 NOV 18:11Z
    An issue has been discovered in GitLab EE affecting all versions starting from 10.2
    cvelistv5