CVE-2020-13319

Опубликовано: 30 сент. 2020

Источник: nvd

CVSS3: 4.3

CVSS2: 4

EPSS Низкий

Описание

An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. Missing permission check for adding time spent on an issue.

Ссылки

https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13319.json
Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/201806
Exploit
Vendor Advisory
https://hackerone.com/reports/755188
Permissions Required
https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13319.json
Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/201806
Exploit
Vendor Advisory
https://hackerone.com/reports/755188
Permissions Required

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*

Версия до 12.10.13 (исключая)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*

Версия от 13.0.0 (включая) до 13.0.8 (исключая)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*

Версия от 13.1.0 (включая) до 13.1.2 (исключая)

EPSS

Процентиль: 52%

0.0078

Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-862

Связанные уязвимости

CVE-2020-13319

CVSS3: 4.3

ubuntu

почти 6 лет назад

An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. Missing permission check for adding time spent on an issue.

CVE-2020-13319

CVSS3: 4.3

debian

почти 6 лет назад

An issue has been discovered in GitLab affecting versions prior to 13. ...

GHSA-9q2c-4gv2-vv76

github

около 4 лет назад

An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. Missing permission check for adding time spent on an issue.

EPSS

Процентиль: 52%

0.0078

Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-862