Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-13263

Опубликовано: 19 июн. 2020
Источник: nvd
CVSS3: 7.5
CVSS3: 8.8
CVSS2: 6.5
EPSS Низкий

Описание

An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allow unauthorized users to impersonate as a maintainer to perform limited actions.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия от 9.5.0 (включая) до 12.9.8 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 9.5.0 (включая) до 12.9.8 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия от 12.10.0 (включая) до 12.10.7 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 12.10.0 (включая) до 12.10.7 (исключая)
cpe:2.3:a:gitlab:gitlab:13.0.0:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:13.0.0:*:*:*:enterprise:*:*:*

EPSS

Процентиль: 42%
0.00198
Низкий

7.5 High

CVSS3

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 5 лет назад

An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allow unauthorized users to impersonate as a maintainer to perform limited actions.

CVSS3: 7.5
debian
больше 5 лет назад

An authorization issue relating to project maintainer impersonation wa ...

github
больше 3 лет назад

An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allow unauthorized users to impersonate as a maintainer to perform limited actions.

EPSS

Процентиль: 42%
0.00198
Низкий

7.5 High

CVSS3

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-863