CVE-2020-13271

MEDIUM 6.1CVE-2020-13271 · Published 10/06/2020 · updated 17/06/2026

In short

CVE-2020-13271 is a MEDIUM (CVSS 6.1) vulnerability affecting gitlab (gitlab).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.3% of all vulnerabilities.
Fix: update to 12.10.7, 13.0.1, 12.9.8 or later.

Package	Affected versions	Patched versions
gitlab gitlab	`≥ 12.10.0, < 12.10.7≥ 13.0.0, < 13.0.1< 12.9.8`	`12.10.713.0.112.9.8`

Description

A Stored Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code in the blobs API in all previous GitLab CE/EE versions through 13.0.1

References

gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13271.json · Vendor Advisory
gitlab.com/gitlab-org/gitlab/-/issues/200094 · Broken Link
hackerone.com/reports/672150 · Permissions Required

More vulnerabilities in gitlab

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

gitlab

≥ 12.10.0, < 12.10.7≥ 13.0.0, < 13.0.1< 12.9.8

12.10.713.0.112.9.8

More vulnerabilities in gitlab

See all →