CVSS: 6.5EPSS: 0%CPEs: 3EXPL: 1CVE-2020-13324
https://notcve.org/view.php?id=CVE-2020-13324
29 Sep 2020 — A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the private activity of a user could be exposed via the API. Se detectó una vulnerabilidad en GitLab versiones anteriores a 13.1. En determinadas condiciones, la actividad privada de un usuario podría ser expuesta por medio de la API • https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13324.json •
CVSS: 7.1EPSS: 0%CPEs: 3EXPL: 0CVE-2020-13325
https://notcve.org/view.php?id=CVE-2020-13325
29 Sep 2020 — A vulnerability was discovered in GitLab versions prior 13.1. The comment section of the issue page was not restricting the characters properly, potentially resulting in a denial of service. Se detectó una vulnerabilidad en GitLab versiones anteriores a 13.1. La sección de comentarios de la página de problemas no restringía los personajes apropiadamente, resultando en una denegación de servicio • https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13325.json •
CVSS: 7.7EPSS: 0%CPEs: 3EXPL: 0CVE-2020-13323
https://notcve.org/view.php?id=CVE-2020-13323
29 Sep 2020 — A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be read via Todos Se detectó una vulnerabilidad en GitLab versiones anteriores a 13.1. Bajo determinadas condiciones, las peticiones de fusión privadas pueden ser leídas mediante Todos • https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13323.json •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1CVE-2020-13331
https://notcve.org/view.php?id=CVE-2020-13331
29 Sep 2020 — An issue has been discovered in GitLab affecting versions prior to 12.10.13. GitLab was vulnerable to a stored XSS by in the Wiki pasges. Se ha detectado un problema en GitLab que afecta a versiones anteriores a 12.10.13. GitLab era vulnerable a un ataque de tipo XSS almacenado mediante los pasajes de Wiki • https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13331.json • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 2EXPL: 1CVE-2020-13330
https://notcve.org/view.php?id=CVE-2020-13330
29 Sep 2020 — An issue has been discovered in GitLab affecting versions prior to 12.10.13. GitLab was vulnerable to a stored XSS in import the Bitbucket project feature. Se ha detectado un problema en GitLab que afecta a versiones anteriores a 12.10.13. GitLab era vulnerable a un ataque de tipo XSS almacenado al importar la funcionalidad de proyecto Bitbucket • https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13330.json • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 1CVE-2020-13329
https://notcve.org/view.php?id=CVE-2020-13329
29 Sep 2020 — An issue has been discovered in GitLab affecting versions from 12.6.2 prior to 12.10.13. GitLab was vulnerable to a stored XSS by in the blob view feature. Se ha detectado un problema en GitLab que afecta a versiones de 12.6.2 anteriores a 12.10.13. GitLab era vulnerable a un ataque de tipo XSS almacenado en la funcionalidad blob view • https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13329.json • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.8EPSS: 0%CPEs: 3EXPL: 1CVE-2020-13328
https://notcve.org/view.php?id=CVE-2020-13328
29 Sep 2020 — An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. GitLab was vulnerable to a stored XSS by using the PyPi files API. Se ha detectado un problema en GitLab que afecta a versiones anteriores a 13.1.2, 13.0.8 y 12.10.13. GitLab era vulnerable a un ataque de tipo XSS almacenado por medio del uso de la API de archivos PyPi • https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13328.json • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2020-13320
https://notcve.org/view.php?id=CVE-2020-13320
29 Sep 2020 — An issue has been discovered in GitLab before version 12.10.13 that allowed a project member with limited permissions to view the project security dashboard. Se detectó un problema en GitLab versiones anteriores a 12.10.13, que permitía a un miembro del proyecto con permisos limitados visualizar el panel de seguridad del proyecto • https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13320.json •
CVSS: 7.2EPSS: 0%CPEs: 3EXPL: 1CVE-2020-13322
https://notcve.org/view.php?id=CVE-2020-13322
29 Sep 2020 — A vulnerability was discovered in GitLab versions after 12.9. Due to improper verification of permissions, an unauthorized user can create and delete deploy tokens. Se detectó una vulnerabilidad en de GitLab posteriores a 12.9. Debido a una comprobación de permisos inapropiada, un usuario no autorizado puede crear y eliminar tokens de implementación • https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13322.json • CWE-863: Incorrect Authorization •
CVSS: 4.3EPSS: 0%CPEs: 3EXPL: 1CVE-2020-13319
https://notcve.org/view.php?id=CVE-2020-13319
29 Sep 2020 — An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. Missing permission check for adding time spent on an issue. Se ha detectado un problema en GitLab que afecta a versiones anteriores a 13.1.2, 13.0.8 y 12.10.13. Una falta de comprobación de permisos para agregar tiempo dedicado a un problema • https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13319.json • CWE-862: Missing Authorization •