writeups.xyz / CVE-2020-13294

Submitter : c2a

Date: 1 November 2020

Bounty : undisclosed

Vulnerabilities :

• Broken Authentication
• OIDC
• OAuth

Programs :

• GitLab

Authors :

• Lauritz Holtmann (@_Lauritz_)

Link :
https://security.lauritz-holtmann.de/advisories/cve-2020-13294/