CVE-2020-13275: High severity gitlab vulnerability
Published Jun 19, 2020
·Updated
A user with an unverified email address could request an access to domain restricted groups in GitLab EE 12.2 and later through 13.0.1
Affected Software
6 affected components
GitLab GitLab>=12.2.0<12.9.8
GitLab GitLab>=12.2.0<12.9.8
GitLab GitLab>=12.10.0<12.10.7
GitLab GitLab>=12.10.0<12.10.7
GitLab GitLab=13.0.0
GitLab GitLab=13.0.0
Event History
Jun 19, 2020
CVE Published
via MITRE·09:55 PM
Data Sourced
via MITRE·09:55 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-13275?
CVE-2020-13275 has a severity rating of Medium, indicating a moderate level of risk.
2
How do I fix CVE-2020-13275?
To mitigate CVE-2020-13275, users should upgrade to GitLab version 12.9.9 or later for 12.x or 13.0.1 or later for 13.x.
3
What is the impact of CVE-2020-13275?
CVE-2020-13275 allows a user with an unverified email address to request access to domain-restricted groups.
4
Which versions of GitLab are affected by CVE-2020-13275?
CVE-2020-13275 affects GitLab versions from 12.2.0 through 13.0.0 but is addressed in later versions.
5
Is there a workaround for CVE-2020-13275 before upgrading?
No specific workaround is provided for CVE-2020-13275, so upgrading is the recommended action.