Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2020-13322

A vulnerability was discovered in GitLab versions after 12.9. Due to improper verification of permissions, an unauthorized user can create and delete deploy tokens.

Description

A vulnerability was discovered in GitLab versions after 12.9. Due to improper verification of permissions, an unauthorized user can create and delete deploy tokens.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GitLab GitLab

  • >=12.9, <12.10.13affected
  • >=13.0, <13.0.8affected
  • >=13.1, <13.1.2affected

References