CVE-2020-13328
An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. GitLab was vulnerable to a stored XSS by using the PyP...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. GitLab was vulnerable to a stored XSS by using the PyPi files API.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"12.0.0"},{"fixed":"12.10.13"},{"introduced":"13.0.0"},{"fixed":"13.0.8"},{"introduced":"13.1.0"},{"fixed":"13.1.2"}]}]
Références
- advisory gitlab.com
- report gitlab.com
- web nvd.nist.gov