CVE-2020-13345

MEDIUM 5.4CVE-2020-13345 · Published 06/10/2020 · updated 17/06/2026

In short

CVE-2020-13345 is a MEDIUM (CVSS 5.4) vulnerability affecting gitlab (gitlab).
Chance of exploitation in the next 30 days (EPSS): 0.89%, higher than 59.5% of all vulnerabilities.
Fix: update to 13.2.10, 13.3.7, 13.4.2 or later.

Package	Affected versions	Patched versions
gitlab gitlab	`≥ 10.8.0, < 13.2.10≥ 13.3.0, < 13.3.7≥ 13.4.0, < 13.4.2`	`13.2.1013.3.713.4.2`

An issue has been discovered in GitLab affecting all versions starting from 10.8. Reflected XSS on Multiple Routes

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

≥ 10.8.0, < 13.2.10≥ 13.3.0, < 13.3.7≥ 13.4.0, < 13.4.2

13.2.1013.3.713.4.2

More vulnerabilities in gitlab

See all →