CVE-2020-13319: Medium severity gitlab vulnerability
Published Sep 29, 2020
·Updated
An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. Missing permission check for adding time spent on an issue.
Affected Software
3 affected components
GitLab GitLab<12.10.13
GitLab GitLab>=13.0.0<13.0.8
GitLab GitLab>=13.1.0<13.1.2
Event History
Sep 29, 2020
CVE Published
via MITRE·03:58 PM
Data Sourced
via MITRE·03:58 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-13319?
CVE-2020-13319 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2020-13319?
To remediate CVE-2020-13319, upgrade GitLab to version 13.1.2 or later, 13.0.8, or 12.10.13.
3
What is the impact of CVE-2020-13319?
The impact of CVE-2020-13319 is that users may add time spent on an issue without proper permission checks.
4
Which versions of GitLab are affected by CVE-2020-13319?
CVE-2020-13319 affects GitLab versions prior to 13.1.2, 13.0.8, and 12.10.13.
5
Is there a workaround for CVE-2020-13319?
There is no official workaround for CVE-2020-13319; the only solution is to upgrade to the patched versions.