CVE-2020-13286
For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server Side Request Forgery.
Original description
The description as published by the source.
For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server Side Request Forgery.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"12.7.0"},{"fixed":"13.0.12"},{"introduced":"13.1.0"},{"fixed":"13.1.6"},{"introduced":"13.2.0"},{"fixed":"13.2.3"}]}]
References
- advisory gitlab.com
- report gitlab.com
- report hackerone.com
- web nvd.nist.gov