CVE-2020-13319

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. Missing permission check for adding time spent on an issue.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published: Sep 30, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-13327.8<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An CVE-2020-133206.5An issue has been discovered in GitLab before version 12.10.13 that allowed a project member with limited permissions to view the project se CVE-2020-133218.3A vulnerability was discovered in GitLab versions prior to 13.1. Username format restrictions could be bypassed allowing for html tags to be CVE-2020-133227.2A vulnerability was discovered in GitLab versions after 12.9. Due to improper verification of permissions, an unauthorized user can create a CVE-2020-133237.7A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be read via Todos CVE-2020-133246.5A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the private activity of a user could be exposed vi CVE-2020-133257.1A vulnerability was discovered in GitLab versions prior 13.1. The comment section of the issue page was not restricting the characters prope CVE-2020-133264.3A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the restriction for Github project import could be CVE-2020-133277.5An issue has been discovered in GitLab Runner affecting all versions starting from 13.4.0 before 13.4.2, all versions starting from 13.3.0 b CVE-2020-133284.8An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. GitLab was vulnerable to a stored XSS by usi CVE-2020-133296.5An issue has been discovered in GitLab affecting versions from 12.6.2 prior to 12.10.13. GitLab was vulnerable to a stored XSS by in the blo CVE-2020-13336.7An elevation of privilege vulnerability exists when Group Policy Services Policy Processing improperly handle reparse points, aka 'Group Pol