NetSight
medium6.5

CVE-2020-13324

A vulnerability was discovered in GitLab versions prior to 13.1.

Impact

A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the private activity of a user could be exposed via the API.

Affected products

VendorProductAffected versions
GitlabGitlab
from 9.4.0 before 12.10.13
from 13.0.0 before 13.0.8
from 13.1.0 before 13.1.2

References