CVE-2020-13348

An issue has been discovered in GitLab EE affecting all versions starting from 10.2. Required CODEOWNERS approval could be bypassed by targeting a branch without the CODEOWNERS file. Affected versions are >=10.2, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2.

Score

CVSS 3.1 5.7 Medium

Status

Modified - cve@gitlab.com

Published

2020-11-17

Last modified

2024-08-04

Affected products

• Gitlab (Gitlab)
• Gitlab Ee (Gitlab)

References

• https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13348.json
• https://gitlab.com/gitlab-org/gitlab/-/issues/246928