VULNERABILITY INTELLIGENCE

CVE-2020-13271

CVSS score6.1 MEDIUM

EPSS probability1.56%

CISA KEVNot currently listed

Published2020-06-10

Last modified2026-06-17

Description

A Stored Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code in the blobs API in all previous GitLab CE/EE versions through 13.0.1