CVE-2020-13270

HIGH · CVSS 7.5 EPSS 1.41%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-06-10 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-13270

Severity

HIGH

CVSS

7.5

EPSS

1.41%

GitLab

Original NVD Description

Missing permission check on fork relation creation in GitLab CE/EE 11.3 and later through 13.0.1 allows guest users to create a fork relation on restricted public projects via API