Security Advisory

CVE-2020-13272

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-06-19 21:40:04
Last updated 2024-08-04 12:11:19
Assigner GitLab
CVSS score 7.5
State PUBLISHED

Description

OAuth flow missing verification checks CE/EE 12.3 and later through 13.0.1 allows unverified user to use OAuth authorization code flow