Vulnerabilities > CVE-2020-13275 - Unspecified vulnerability in Gitlab
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
NONE Summary
A user with an unverified email address could request an access to domain restricted groups in GitLab EE 12.2 and later through 13.0.1
Vulnerable Configurations
References
- https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13275.json
- https://gitlab.com/gitlab-org/gitlab/-/issues/209254
- https://hackerone.com/reports/806255
- https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13275.json
- https://hackerone.com/reports/806255
- https://gitlab.com/gitlab-org/gitlab/-/issues/209254