Beveiligingsadvies

CVE-2020-13262

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-06-19 21:59:20
Laatst bijgewerkt 2024-08-04 12:11:19
Toegewezen door GitLab
CVSS-score 6.1
Status PUBLISHED

Beschrijving

Client-Side code injection through Mermaid markup in GitLab CE/EE 12.9 and later through 13.0.1 allows a specially crafted Mermaid payload to PUT requests on behalf of other users via clicking on a link