CVE-2020-13352
Private group info is leaked leaked in GitLab CE/EE version 10.2 and above, when the project is moved from private to public group. Affected versions...
Original description
The description as published by the source.
Private group info is leaked leaked in GitLab CE/EE version 10.2 and above, when the project is moved from private to public group. Affected versions are: >=10.2, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"13.5.2"}]}]
References
- advisory gitlab.com
- report gitlab.com
- report hackerone.com
- web nvd.nist.gov