Vulnetix
Try Vulnetix Request Demo
BIT-gitlab-2020-13300 PUBLISHED CVSS 10 CRITICAL

GitLab CE/EE version 13.3 prior to 13.3.4 was vulnerable to an OAuth authorization scope change without user consent in the middle of the authorization flow.

Risk Scores

CVSS v3.1
10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Affected Products

VendorProductVersions
Bitnamigitlab13.3.0, 13.3.0, 13.3.0

Timeline

References

Open in Interactive Console →