GitLab up to 13.1.9/13.2.7/13.3.3 Standalone Vulnerability Page Stored cross site scripting

Summaryinfo

A vulnerability was found in GitLab up to 13.1.9/13.2.7/13.3.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Standalone Vulnerability Page. Performing a manipulation results in cross site scripting (Stored). This vulnerability is reported as CVE-2020-13301. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.

Detailsinfo

A vulnerability classified as problematic has been found in GitLab up to 13.1.9/13.2.7/13.3.3 (Bug Tracking Software). This affects an unknown function of the component Standalone Vulnerability Page. The manipulation with an unknown input leads to a cross site scripting vulnerability (Stored). CWE is classifying the issue as CWE-80. The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages. This is going to have an impact on integrity. The summary by CVE is:

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was vulnerable to a stored XSS on the standalone vulnerability page.

The weakness was disclosed 09/14/2020 (Website). The advisory is shared at gitlab.com. This vulnerability is uniquely identified as CVE-2020-13301 since 05/21/2020. It is possible to initiate the attack remotely. Additional levels of successful authentication are required for exploitation. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1059.007 for this issue.

The vulnerability scanner Nessus provides a plugin with the ID 258009 (Linux Distros Unpatched Vulnerability : CVE-2020-13301), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 13.1.10, 13.2.8 or 13.3.4 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (258009). The entries VDB-161221, VDB-161220, VDB-161219 and VDB-161218 are pretty similar. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Bug Tracking Software

Name

• GitLab

Version

• 13.1.0
• 13.1.1
• 13.1.2
• 13.1.3
• 13.1.4
• 13.1.5
• 13.1.6
• 13.1.7
• 13.1.8
• 13.1.9
• 13.2.0
• 13.2.1
• 13.2.2
• 13.2.3
• 13.2.4
• 13.2.5
• 13.2.6
• 13.2.7
• 13.3.0
• 13.3.1
• 13.3.2
• 13.3.3

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion