NetSight
IP …
medium4.3

CVE-2020-13357

An issue was discovered in Gitlab CE/EE versions >= 13.1 to <13.4.7, >= 13.5 to <13.5.5, and >= 13.6 to <13.6.2 allowed an unauthorized user to access the user…

Impact

An issue was discovered in Gitlab CE/EE versions >= 13.1 to <13.4.7, >= 13.5 to <13.5.5, and >= 13.6 to <13.6.2 allowed an unauthorized user to access the user list corresponding to a feature flag in a project.

Affected products

VendorProductAffected versions
GitlabGitlab
from 13.1.0 before 13.4.7
from 13.5.0 before 13.5.5
from 13.6.0 before 13.6.2

Weakness classification

CWE-639

References