CVE-2020-13288

MEDIUM 4.8CVE-2020-13288 · Published 12/08/2020 · updated 17/06/2026

In short

CVE-2020-13288 is a MEDIUM (CVSS 4.8) vulnerability affecting gitlab (gitlab).
Chance of exploitation in the next 30 days (EPSS): 4.0%, higher than 90.7% of all vulnerabilities.
Fix: update to 13.0.12, 13.1.6, 13.2.3 or later.

Package	Affected versions	Patched versions
gitlab gitlab	`≥ 13.0.0, < 13.0.12≥ 13.1.0, < 13.1.6≥ 13.2.0, < 13.2.3`	`13.0.1213.1.613.2.3`

In GitLab before 13.0.12, 13.1.6, and 13.2.3, a stored XSS vulnerability exists in the CI/CD Jobs page

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

≥ 13.0.0, < 13.0.12≥ 13.1.0, < 13.1.6≥ 13.2.0, < 13.2.3

13.0.1213.1.613.2.3

More vulnerabilities in gitlab

See all →