CVE-2020-13270

Publication date

2020-06-10 14:35:07

Family

GitLab

State

PUBLISHED

Description

Missing permission check on fork relation creation in GitLab CE/EE 11.3 and later through 13.0.1 allows guest users to create a fork relation on restricted public projects via API