Insufficient Permission Check Vulnerability in GitLab Allows Unauthorized Deletions

CVE-2020-13341 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2. Insufficient permission check allows attacker with developer role to perform various deletions.

Learn more about our Web Application Penetration Testing UK.