CVE-2020-13345

MEDIUM

GitLab 10.8.0-13.2.9 - Reflected Cross-Site Scripting on Multiple Routes

Title source: llm

An issue has been discovered in GitLab affecting all versions starting from 10.8. Reflected XSS on Multiple Routes

Core 3

Core References

Broken Link x_refsource_misc

Exploit, Permissions Required, Third Party Advisory x_refsource_misc

Vendor Advisory x_refsource_confirm

CVSS v3 5.5

EPSS 0.0020

EPSS Percentile 41.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

CWE

CWE-79

Status published

Products (1)

gitlab/gitlab 10.8.0 - 13.2.10 (2 CPE variants)

Published Oct 06, 2020

Tracked Since Feb 18, 2026