ANCHORE-2020-13304

ANCHORE-2020-13304 PUBLISHED

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Same 2 factor Authentication secret code was generated which resulted an attacker to maintain access under certain conditions.

Affected Products

Vendor	Product	Versions
GitLab	GitLab Enterprise	1.0, 13.2, 13.2
GitLab	GitLab	1.0, 13.3, 1.0

Timeline

Sep 2, 2020 CVE Published

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13304.json url
https://gitlab.com/gitlab-org/gitlab/-/issues/27686 url
https://hackerone.com/reports/511260 url

Open in Interactive Console →