CVE-2020-13300

GitLab CE/EE version 13.3 prior to 13.3.4 was vulnerable to an OAuth authorization scope change without user consent in the middle of the authorization flow.

CVSS v3 8.0 HIGH
CVSS v2.0 6.4 MEDIUM

8.0^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.6 / Impact : 5.8

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope CHANGED

6.4^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13300.json	Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/219931	Broken Link
https://hackerone.com/reports/884766	Permissions Required Third Party Advisory
https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13300.json	Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/219931	Broken Link
https://hackerone.com/reports/884766	Permissions Required Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:gitlab:gitlab:::::community:::*
	cpe:2.3:a:gitlab:gitlab:::::enterprise:::*

History

21 Nov 2024, 05:00

Type	Values Removed	Values Added
CVSS	v2 : ~~6.4~~ v3 : ~~10.0~~	v2 : 6.4 v3 : 8.0
References	~~() https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13300.json - Vendor Advisory~~	() https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13300.json - Vendor Advisory
References	~~() https://gitlab.com/gitlab-org/gitlab/-/issues/219931 - Broken Link~~	() https://gitlab.com/gitlab-org/gitlab/-/issues/219931 - Broken Link
References	~~() https://hackerone.com/reports/884766 - Permissions Required, Third Party Advisory~~	() https://hackerone.com/reports/884766 - Permissions Required, Third Party Advisory

Information

Published : 2020-09-14 19:15

Updated : 2024-11-21 05:00

NVD link : CVE-2020-13300

Mitre link : CVE-2020-13300

CVE.ORG link : CVE-2020-13300

JSON object : View

Products Affected

gitlab

gitlab

CWE

CWE-863

Incorrect Authorization

{"id": "CVE-2020-13300", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Secondary", "source": "cve@gitlab.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.0, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.8, "exploitabilityScore": 1.6}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 10.0, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.8, "exploitabilityScore": 3.9}]}, "published": "2020-09-14T19:15:10.957", "references": [{"url": "https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13300.json", "tags": ["Vendor Advisory"], "source": "cve@gitlab.com"}, {"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/219931", "tags": ["Broken Link"], "source": "cve@gitlab.com"}, {"url": "https://hackerone.com/reports/884766", "tags": ["Permissions Required", "Third Party Advisory"], "source": "cve@gitlab.com"}, {"url": "https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13300.json", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/219931", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://hackerone.com/reports/884766", "tags": ["Permissions Required", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "GitLab CE/EE version 13.3 prior to 13.3.4 was vulnerable to an OAuth authorization scope change without user consent in the middle of the authorization flow."}, {"lang": "es", "value": "La versi\u00f3n 13.3 de GitLab CE/EE anterior a la 13.3.4 era vulnerable a un cambio de \u00e1mbito de autorizaci\u00f3n OAuth sin el consentimiento del usuario en medio del flujo de autorizaci\u00f3n"}], "lastModified": "2024-11-21T05:00:59.093", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "vulnerable": true, "matchCriteriaId": "CE11E630-53C8-43AF-9F81-EA4AD52D8241", "versionEndExcluding": "13.3.4", "versionStartIncluding": "13.3.0"}, {"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "5044D423-9351-4840-BAD4-43EFB42FC527", "versionEndExcluding": "13.3.4", "versionStartIncluding": "13.3.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@gitlab.com"}