CVE-2020-13337 - An issue has been discovered in GitLab affecting versions from 12.10 to 12.10.12 that allowed for a stored XSS payload to be added as a group name

HIGH

An issue has been discovered in GitLab affecting versions from 12.10 to 12.10.12 that allowed for a stored XSS payload to be added as a group name

Published Oct 2, 2020

7.2

HIGH

CVSS 3.1

EPSS 0.75%

An issue has been discovered in GitLab affecting versions from 12.10 to 12.10.12 that allowed for a stored XSS payload to be added as a group name.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
>=12.10, <12.10.13	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-5597		Advisory
https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13337.json		x_refsource_CONFIRMThird Party Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/199049		x_refsource_MISCBroken Link