CVEs-PoC/2020/CVE-2020-13269.md

CVE-2020-13269

Description

A Reflected Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code on the Static Site Editor in GitLab CE/EE 12.10 and later through 13.0.1

POC

Reference

• https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13269.json
• https://gitlab.com/gitlab-org/gitlab/-/issues/216528

Github

No PoCs found on GitHub currently.