CVE-2020-13337

Summary

An issue has been discovered in GitLab affecting versions from 12.10 to 12.10.12 that allowed for a stored XSS payload to be added as a group name.

Affected Software

Weaknesses

• Improper neutralization of input during web page generation ('cross-site scripting') in GitLab

ADP Enrichment

CVE Program Container

Additional References

• https://gitlab.com/gitlab-org/gitlab/-/issues/199049
• https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13337.json

References

• https://gitlab.com/gitlab-org/gitlab/-/issues/199049
• https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13337.json

• ←Previous
• Next→