CVE-2020-13336

An issue has been discovered in GitLab affecting versions from 11.8 before 12.10.13. GitLab was vulnerable to a stored XSS by in the error tracking feature.

References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type

GIT

Repo

https://gitlab.com/gitlab-org/gitlab

Events

Introduced

002a28279f5b3fd229f929bb1f40eb7b5fc87ee9

Fixed

ec145a327278663269837a9fbbf06aaef2517df8

Database specific

Show details

{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "range":  [
                {
                    "introduced":  "11.8.0"
                },
                {
                    "fixed":  "12.10.13"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "range":  [
                {
                    "introduced":  "11.8.0"
                },
                {
                    "fixed":  "12.10.13"
                }
            ],
            "source":  "CPE_RANGE"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-13336.json"