|
212641
|
8.6 |
HIGH
Local
|
gitlab
|
gitlab-vscode-extension
|
Client side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on user system
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2020-13279
|
2024-11-21 14:00 |
2020-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212642
|
5.3 |
MEDIUM
Network
|
gitlab
|
gitlab
|
Kubernetes cluster token disclosure in GitLab CE/EE 10.3 and later through 13.0.1 allows other group maintainers to view Kubernetes cluster token
|
CWE-200
Information Exposure
|
CVE-2020-13264
|
2024-11-21 14:00 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212643
|
8.8 |
HIGH
Network
|
gitlab
|
gitlab
|
An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allow unauthorized users to impersonate as a maintainer to perf…
|
CWE-863
Incorrect Authorization
|
CVE-2020-13263
|
2024-11-21 14:00 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212644
|
2.7 |
LOW
Network
|
gitlab
|
gitlab
|
Amazon EKS credentials disclosure in GitLab CE/EE 12.6 and later through 13.0.1 allows other administrators to view Amazon EKS credentials via HTML source code
|
CWE-200
Information Exposure
|
CVE-2020-13261
|
2024-11-21 14:00 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212645
|
4.3 |
MEDIUM
Network
|
gitlab
|
gitlab
|
User is allowed to set an email as a notification email even without verifying the new email in all previous GitLab CE/EE versions through 13.0.1
|
CWE-862
Missing Authorization
|
CVE-2020-13276
|
2024-11-21 14:00 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212646
|
8.1 |
HIGH
Network
|
gitlab
|
gitlab
|
A user with an unverified email address could request an access to domain restricted groups in GitLab EE 12.2 and later through 13.0.1
|
NVD-CWE-noinfo
|
CVE-2020-13275
|
2024-11-21 14:00 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212647
|
7.5 |
HIGH
Network
|
gitlab
|
gitlab
|
A security issue allowed achieving Denial of Service attacks through memory exhaustion by uploading malicious artifacts in all previous GitLab versions through 13.0.1
|
NVD-CWE-noinfo
|
CVE-2020-13274
|
2024-11-21 14:00 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212648
|
7.5 |
HIGH
Network
|
gitlab
|
gitlab
|
A Denial of Service vulnerability allowed exhausting the system resources in GitLab CE/EE 12.0 and later through 13.0.1
|
NVD-CWE-noinfo
|
CVE-2020-13273
|
2024-11-21 14:00 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212649
|
8.8 |
HIGH
Network
|
gitlab
|
gitlab
|
OAuth flow missing verification checks CE/EE 12.3 and later through 13.0.1 allows unverified user to use OAuth authorization code flow
|
CWE-345
Insufficient Verification of Data Authenticity
|
CVE-2020-13272
|
2024-11-21 14:00 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212650
|
5.3 |
MEDIUM
Network
|
gitlab
|
gitlab
|
User email verification bypass in GitLab CE/EE 12.5 and later through 13.0.1 allows user to bypass email verification
|
CWE-345
Insufficient Verification of Data Authenticity
|
CVE-2020-13265
|
2024-11-21 14:00 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|