Security Advisory

CVE-2020-13300

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-09-14 18:34:29
Last updated 2024-08-04 12:11:19
Assigner GitLab
State PUBLISHED

Description

GitLab CE/EE version 13.3 prior to 13.3.4 was vulnerable to an OAuth authorization scope change without user consent in the middle of the authorization flow.