MEDIUM

CVE-2020-13268

Gitlab GitLab 2020-06-10 CVSS v3.1

CVSS

5.3

Description

A specially crafted request could be used to confirm the existence of files hosted on object storage services, without disclosing their contents. This vulnerability affects GitLab CE/EE 12.10 and later through 13.0.1

Summary dbcve.org

This vulnerability in GitLab allows an attacker to confirm the existence of files on object storage services (S3, Azure Blob, GCS, etc.) through specially crafted requests, without actually reading the file contents. The server responds differently based on whether a file exists, enabling reconnaissance to map stored files, artifacts, or uploads.

Mitigation

Upgrade GitLab to version 13.0.2 or later. If immediate upgrade is not feasible, consider implementing additional request rate limiting or access controls on object storage API endpoints to reduce the attack surface.

Weakness (CWE)

CWE-200 Information Exposure

EPSS Score

1.07%

Probability of exploitation in next 30 days

63.4th percentile

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13268.json Vendor Advisory https://gitlab.com/gitlab-org/gitlab/-/issues/214220 Vendor Advisory https://hackerone.com/reports/848415 Permissions Required, Third Party Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE