CVE-2020-13342: Medium severity gitlab vulnerability
Published Oct 7, 2020
·Updated
An issue has been discovered in GitLab affecting versions prior to 13.2.10, 13.3.7 and 13.4.2: Lack of Rate Limiting at Re-Sending Confirmation Email
Affected Software
6 affected components
GitLab GitLab>=10.1.0<13.2.10
GitLab GitLab>=10.1.0<13.2.10
GitLab GitLab>=13.3.0<13.3.7
GitLab GitLab>=13.3.0<13.3.7
GitLab GitLab>=13.4.0<13.4.2
GitLab GitLab>=13.4.0<13.4.2
Event History
Oct 7, 2020
CVE Published
via MITRE·03:57 PM
Data Sourced
via MITRE·03:57 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-13342?
CVE-2020-13342 is categorized as a medium severity vulnerability.
2
How do I fix CVE-2020-13342?
To fix CVE-2020-13342, upgrade GitLab to versions 13.2.10, 13.3.7, or 13.4.2 or later.
3
What is the impact of CVE-2020-13342?
The impact of CVE-2020-13342 includes potential abuse of the confirmation email resending feature due to lack of rate limiting.
4
Which versions are affected by CVE-2020-13342?
CVE-2020-13342 affects GitLab versions prior to 13.2.10, 13.3.7, and 13.4.2.
5
Is CVE-2020-13342 present in GitLab Community Edition?
Yes, CVE-2020-13342 is present in both GitLab Community Edition and Enterprise Edition versions affected.