low2.5
CVE-2020-13353
When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79.0 or above.
Impact
When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79.0 or above.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitlab | Gitaly | from 1.79.0 before 13.3.9 from 13.4.0 before 13.4.5 from 13.5.0 before 13.5.2 |