GitLab up to 13.1.9/13.2.7/13.3.3 Omniauth Endpoint cross site scripting

Summaryinfo

A vulnerability has been found in GitLab up to 13.1.9/13.2.7/13.3.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Omniauth Endpoint. This manipulation causes cross site scripting. This vulnerability is tracked as CVE-2020-13314. The attack is possible to be carried out remotely. No exploit exists. The affected component should be upgraded.

Detailsinfo

A vulnerability classified as problematic was found in GitLab up to 13.1.9/13.2.7/13.3.3 (Bug Tracking Software). Affected by this vulnerability is an unknown part of the component Omniauth Endpoint. The manipulation with an unknown input leads to a cross site scripting vulnerability. The CWE definition for the vulnerability is CWE-80. The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages. As an impact it is known to affect integrity. The summary by CVE is:

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Omniauth endpoint allowed a malicious user to submit content to be displayed back to the user within error messages.

The weakness was disclosed 09/14/2020 (Website). It is possible to read the advisory at gitlab.com. This vulnerability is known as CVE-2020-13314 since 05/21/2020. The attack can be launched remotely. The exploitation doesn't need any form of authentication. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1059.007 according to MITRE ATT&CK.

Upgrading to version 13.1.10, 13.2.8 or 13.3.4 eliminates this vulnerability.

The entries VDB-161231, VDB-161230, VDB-161229 and VDB-161228 are pretty similar. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Bug Tracking Software

Name

• GitLab

Version

• 13.1.0
• 13.1.1
• 13.1.2
• 13.1.3
• 13.1.4
• 13.1.5
• 13.1.6
• 13.1.7
• 13.1.8
• 13.1.9
• 13.2.0
• 13.2.1
• 13.2.2
• 13.2.3
• 13.2.4
• 13.2.5
• 13.2.6
• 13.2.7
• 13.3.0
• 13.3.1
• 13.3.2
• 13.3.3

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion