Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2020-13337

An issue has been discovered in GitLab affecting versions from 12.10 to 12.10.12 that allowed for a stored XSS payload to be added as a group name.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 33.4%
CVSS Severity
CVSS v3 Score 7.2
CVSS v2 Score 3.5
Products affected by CVE-2020-13337
  • Gitlab » Gitlab » Version: 12.10.0
    cpe:2.3:a:gitlab:gitlab:12.10.0
  • Gitlab » Gitlab » Version: 12.10.1
    cpe:2.3:a:gitlab:gitlab:12.10.1
  • Gitlab » Gitlab » Version: 12.10.10
    cpe:2.3:a:gitlab:gitlab:12.10.10
  • Gitlab » Gitlab » Version: 12.10.11
    cpe:2.3:a:gitlab:gitlab:12.10.11
  • Gitlab » Gitlab » Version: 12.10.2
    cpe:2.3:a:gitlab:gitlab:12.10.2
  • Gitlab » Gitlab » Version: 12.10.3
    cpe:2.3:a:gitlab:gitlab:12.10.3
  • Gitlab » Gitlab » Version: 12.10.4
    cpe:2.3:a:gitlab:gitlab:12.10.4
  • Gitlab » Gitlab » Version: 12.10.5
    cpe:2.3:a:gitlab:gitlab:12.10.5
  • Gitlab » Gitlab » Version: 12.10.6
    cpe:2.3:a:gitlab:gitlab:12.10.6
  • Gitlab » Gitlab » Version: 12.10.7
    cpe:2.3:a:gitlab:gitlab:12.10.7
  • Gitlab » Gitlab » Version: 12.10.8
    cpe:2.3:a:gitlab:gitlab:12.10.8
  • Gitlab » Gitlab » Version: 12.10.9
    cpe:2.3:a:gitlab:gitlab:12.10.9


Contact Us

Shodan ® - All rights reserved