Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-13304

Опубликовано: 14 сент. 2020
Источник: nvd
CVSS3: 3.8
CVSS3: 7.2
CVSS2: 6.5
EPSS Низкий

Описание

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Same 2 factor Authentication secret code was generated which resulted an attacker to maintain access under certain conditions.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*
Версия до 13.1.10 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*
Версия от 13.2.0 (включая) до 13.2.8 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*
Версия от 13.3.0 (включая) до 13.3.4 (исключая)

EPSS

Процентиль: 52%
0.00288
Низкий

3.8 Low

CVSS3

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-330

Связанные уязвимости

CVSS3: 3.8
ubuntu
почти 5 лет назад

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Same 2 factor Authentication secret code was generated which resulted an attacker to maintain access under certain conditions.

CVSS3: 3.8
debian
почти 5 лет назад

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2 ...

github
около 3 лет назад

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Same 2 factor Authentication secret code was generated which resulted an attacker to maintain access under certain conditions.

EPSS

Процентиль: 52%
0.00288
Низкий

3.8 Low

CVSS3

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-330