CVEvulnerability
CVE-2020-13327
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-10-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.0 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
Description
An issue has been discovered in GitLab Runner affecting all versions starting from 13.4.0 before 13.4.2, all versions starting from 13.3.0 before 13.3.7, all versions starting from 13.2.0 before 13.2.10. Insecure Runner Configuration in Kubernetes Environments
Affected configurations
• gitlab runner (>= 13.2.0 < 13.2.10)
• gitlab runner (>= 13.3.0 < 13.3.7)
• gitlab runner (>= 13.4.0 < 13.4.2)
References
- https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13327.json Vendor Advisory
- https://gitlab.com/gitlab-org/gitlab-runner/-/issues/26833 Broken Link, Issue Tracking, Vendor Advisory
- https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13327.json Vendor Advisory
- https://gitlab.com/gitlab-org/gitlab-runner/-/issues/26833 Broken Link, Issue Tracking, Vendor Advisory