Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-13298

Опубликовано: 14 сент. 2020
Источник: nvd
CVSS3: 7.2
CVSS3: 5.8
CVSS2: 5
EPSS Низкий

Описание

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Conan package upload functionality was not properly validating the supplied parameters, which resulted in the limited files disclosure.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*
Версия до 13.1.10 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*
Версия от 13.2.0 (включая) до 13.2.8 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*
Версия от 13.3.0 (включая) до 13.3.4 (исключая)

EPSS

Процентиль: 55%
0.0032
Низкий

7.2 High

CVSS3

5.8 Medium

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 7.2
ubuntu
больше 5 лет назад

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Conan package upload functionality was not properly validating the supplied parameters, which resulted in the limited files disclosure.

CVSS3: 7.2
debian
больше 5 лет назад

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2 ...

github
больше 3 лет назад

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Conan package upload functionality was not properly validating the supplied parameters, which resulted in the limited files disclosure.

EPSS

Процентиль: 55%
0.0032
Низкий

7.2 High

CVSS3

5.8 Medium

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo