PT-2020-13428
CVE-2020-13287
·
Published
2020-09-14
·
Updated
2024-03-06
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
GitLab versions prior to 13.1.10
GitLab versions prior to 13.2.8
GitLab versions prior to 13.3.4
Description
A vulnerability was discovered that allows project reporters and above to see confidential EPIC attached to confidential issues.
Recommendations
For versions prior to 13.1.10, update to version 13.1.10 or later.
For versions prior to 13.2.8, update to version 13.2.8 or later.
For versions prior to 13.3.4, update to version 13.3.4 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾