Security Advisory

CVE-2020-13346

6.5
MEDIUM

Vulnerability Description

Membership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, allowing guest users to access confidential issues through API.
Published Date October 7, 2020
Official Source NIST NVD Advisory