CVE-2020-13330: XSS
Published Sep 29, 2020
·Updated
An issue has been discovered in GitLab affecting versions prior to 12.10.13. GitLab was vulnerable to a stored XSS in import the Bitbucket project feature.
Affected Software
2 affected components
GitLab GitLab<=11.2.0
GitLab GitLab>=12.10.0<12.10.13
Event History
Sep 29, 2020
CVE Published
via MITRE·05:41 PM
Data Sourced
via MITRE·05:41 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-13330?
CVE-2020-13330 is considered a medium severity vulnerability due to its potential for stored cross-site scripting (XSS).
2
How do I fix CVE-2020-13330?
To fix CVE-2020-13330, upgrade your GitLab installation to version 12.10.13 or later.
3
What versions of GitLab are affected by CVE-2020-13330?
CVE-2020-13330 affects GitLab versions prior to 12.10.13 and versions up to 11.2.0.
4
What type of vulnerability is CVE-2020-13330?
CVE-2020-13330 is a stored cross-site scripting (XSS) vulnerability found in the Bitbucket project import feature.
5
When was CVE-2020-13330 discovered?
CVE-2020-13330 was discovered in 2020 and affects GitLab installations prior to the specified patched version.