CVE-2020-13308: Medium severity gitlab vulnerability
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. A user without 2 factor authentication enabled could be prohibited from accessing GitLab by being invited into a project that had 2 factor authentication inheritance.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-13308?
CVE-2020-13308 is classified as a medium severity vulnerability.
How do I fix CVE-2020-13308?
To fix CVE-2020-13308, upgrade GitLab to versions 13.1.10, 13.2.8, or 13.3.4 or later.
Who is affected by CVE-2020-13308?
Users of GitLab versions before 13.1.10, 13.2.8, or 13.3.4 without two-factor authentication enabled are affected by CVE-2020-13308.
What is the impact of CVE-2020-13308?
The impact of CVE-2020-13308 is that it can prohibit non-2FA users from accessing GitLab when invited to certain projects.
What versions of GitLab are vulnerable to CVE-2020-13308?
GitLab community and enterprise versions prior to 13.1.10, 13.2.8, and 13.3.4 are vulnerable to CVE-2020-13308.