← back
CVE-2020-13358

CVE-2020-13358

CVSS 4.7 MEDIUMEPSS 0.3%
A vulnerability in the internal Kubernetes agent api in GitLab CE/EE version 13.3 and above allows unauthorized access to private projects. Affected versions are: >=13.4, <13.4.5,>=13.3, <13.3.9,>=13.5, <13.5.2.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
GitLab · Gitlab CE/EE

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13358.jsonhttps://gitlab.com/gitlab-org/gitlab/-/issues/241674