CVE-2020-13344
CVE-2020-13344
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2. Sessions keys are stored in plain-text in Redis which allows attacker with Redis access to authenticate as any user that has a session stored in Redis
CVSS 5.7 · Media · EPSS 0,4%
- Publicación
- Actualización
Pila tecnológica: system