CVE-2020-13295
No fix known EPSS 1%CVSS 5.4
For GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is susceptible to SSRF.
Products: GitLab Runner
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu:18.04:LTS | gitlab-ci-multi-runner | no fix |
| Ubuntu:20.04:LTS | gitlab-ci-multi-runner | no fix |