Description (CNA)
An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2. Insufficient permission check allows attacker with developer role to perform various deletions.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| GitLab / GitLab | affected >=13.1, <13.2.10; affected >=13.3, <13.3.7; affected >=13.4, <13.4.2 |
CWE
No CWE identifiers supplied.
References
- https://gitlab.com/gitlab-org/gitlab/-/issues/239348
- https://hackerone.com/reports/960244
- https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13341.json
ADP enrichment
No English description supplied.