CVE-2020-13291

2020-08-1215:15:12

Google

osv.dev

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

27.9%

In GitLab before 13.2.3, project sharing could temporarily allow too permissive access.

CPENameOperatorVersion
gitlabeq13.2.1-ee
gitlabeq13.2.0-ee
gitlabeq13.2.2-ee

Name	Operator	Version
gitlab	eq	13.2.1-ee
gitlab	eq	13.2.0-ee
gitlab	eq	13.2.2-ee

References

gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13291.json

gitlab.com/gitlab-org/gitlab/-/issues/230521