Security Advisory

CVE-2020-13270

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-06-10 14:35:07
Last updated 2024-08-04 12:11:19
Assigner GitLab
State PUBLISHED

Description

Missing permission check on fork relation creation in GitLab CE/EE 11.3 and later through 13.0.1 allows guest users to create a fork relation on restricted public projects via API