Vulnerabilities > CVE-2020-13268 - Unspecified vulnerability in Gitlab

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

network

low complexity

gitlab

NVD

Published: 2020-06-10

Updated: 2021-07-21

Summary

A specially crafted request could be used to confirm the existence of files hosted on object storage services, without disclosing their contents. This vulnerability affects GitLab CE/EE 12.10 and later through 13.0.1

Vulnerable Configurations

Part	Description	Count
Application	Gitlab Gitlab Gitlab 12.10.0 Gitlab Gitlab 12.10.1 Gitlab Gitlab 12.10.2 Gitlab Gitlab 12.10.3 Gitlab Gitlab 12.10.4 Gitlab Gitlab 12.10.5 Gitlab Gitlab 12.10.6 Gitlab Gitlab 12.10.7 Gitlab Gitlab 12.10.8 Gitlab Gitlab 12.10.9 Gitlab Gitlab 12.10.10 Gitlab Gitlab 12.10.11 Gitlab Gitlab 12.10.12 Gitlab Gitlab 12.10.13 Gitlab Gitlab 13.0.0 Gitlab Gitlab 13.0.1	32

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13268.json
https://gitlab.com/gitlab-org/gitlab/-/issues/214220
https://hackerone.com/reports/848415