RubyGems/gitaly CVE-2020-13353: low 3.2, EPSS 0.28%
Gitaly Insufficient Session Expiration vulnerability
Action: Upgrade gitaly to 13.3.9 or later.
bundle update gitalyAffected
| introduced | fixed | last affected |
|---|---|---|
| 1.79.0 | 13.3.9 | - |
| 13.4 | 13.4.5 | - |
| 13.5 | 13.5.2 | - |
Fixed versions
| 13.3.9 | 13.4.5 | 13.5.2 |
Sources
- osv: GHSA-mmmm-chjf-jmvw
- https://nvd.nist.gov/vuln/detail/CVE-2020-13353
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/gitaly/CVE-2020-13353.yml
- https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13353.json
- https://gitlab.com/gitlab-org/gitaly
- https://gitlab.com/gitlab-org/gitaly/-/issues/2882
CVE-2020-13353 · published · modified · JSON