Gitlab Security Team

2 exploits Active since Jun 2020

CVE-2020-13266 WRITEUP MEDIUM WRITEUP

GitLab CE/EE <13.0.1 - Privilege Escalation

Insecure authorization in Project Deploy Keys in GitLab CE/EE 12.8 and later through 13.0.1 allows users to update permissions of other users' deploy keys under certain conditions

CVSS 4.3

View Code

CVE-2020-13337 WRITEUP HIGH WRITEUP

GitLab <12.10.12 - XSS

An issue has been discovered in GitLab affecting versions from 12.10 to 12.10.12 that allowed for a stored XSS payload to be added as a group name.

CVSS 7.2

View Code