Lucene search

K
osvGoogleOSV:CVE-2020-13346
HistoryOct 07, 2020 - 2:15 p.m.

CVE-2020-13346

2020-10-0714:15:11
Google
osv.dev
4
gitlab
membership changes
todo subscriptions
version 13.2.10
version 13.3.7
version 13.4.2
guest access
confidential issues
api

AI Score

6.4

Confidence

Low

EPSS

0.001

Percentile

38.9%

Membership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, allowing guest users to access confidential issues through API.

AI Score

6.4

Confidence

Low

EPSS

0.001

Percentile

38.9%