CVSS: 5.5EPSS: 0%CPEs: 6EXPL: 1CVE-2020-13345
https://notcve.org/view.php?id=CVE-2020-13345
An issue has been discovered in GitLab affecting all versions starting from 10.8. Reflected XSS on Multiple Routes Se ha detectado un problema en GitLab que afecta a todas las versiones a partir de la 10.8. Un vulnerabilidad de tipo XSS reflejado en Múltiples Rutas • https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13345.json https://gitlab.com/gitlab-org/gitlab/-/issues/232829 https://hackerone.com/reports/946728 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 1CVE-2020-13343
https://notcve.org/view.php?id=CVE-2020-13343
An issue has been discovered in GitLab affecting all versions starting from 11.2. Unauthorized Users Can View Custom Project Template Se ha detectado un problema en GitLab que afecta a todas las versiones a partir de la 11.2. Los Usuarios No Autorizados pueden Visualizar la Plantilla de Proyecto Personalizada • https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13343.json https://gitlab.com/gitlab-org/gitlab/-/issues/14861 https://hackerone.com/reports/689314 • CWE-668: Exposure of Resource to Wrong Sphere •
CVSS: 5.4EPSS: 0%CPEs: 6EXPL: 1CVE-2020-13338
https://notcve.org/view.php?id=CVE-2020-13338
An issue has been discovered in GitLab affecting versions prior to 12.10.13, 13.0.8, 13.1.2. A stored cross-site scripting vulnerability was discovered when editing references. Se ha detectado un problema en GitLab que afecta a versiones anteriores a 12.10.13, 13.0.8, 13.1.2. Se detectó una vulnerabilidad de tipo cross-site scripting almacenado cuando se editan referencias • https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13338.json https://gitlab.com/gitlab-org/gitlab/-/issues/213273 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.3EPSS: 0%CPEs: 3EXPL: 1CVE-2020-13321
https://notcve.org/view.php?id=CVE-2020-13321
A vulnerability was discovered in GitLab versions prior to 13.1. Username format restrictions could be bypassed allowing for html tags to be added. Se detectó una vulnerabilidad en GitLab versiones anteriores a 13.1. Unas restricciones de formato de nombre de usuario pueden omitidas, permitiendo agregar etiquetas html • https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13321.json https://gitlab.com/gitlab-org/gitlab/-/issues/25751 •
CVSS: 6.5EPSS: 0%CPEs: 3EXPL: 1CVE-2020-13324
https://notcve.org/view.php?id=CVE-2020-13324
A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the private activity of a user could be exposed via the API. Se detectó una vulnerabilidad en GitLab versiones anteriores a 13.1. En determinadas condiciones, la actividad privada de un usuario podría ser expuesta por medio de la API • https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13324.json https://gitlab.com/gitlab-org/gitlab/-/issues/24542 •