CVE-2020-13346

Membership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, allowing guest users to access confidential issues through API...

GitLab 11.2 < 13.2.10 / 13.3.0 < 13.3.7 / 13.4.0 < 13.4.2 (CVE-2020-13346)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Membership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, allowing guest users to access confidential issues through API. CVE-2020-13346 Note...

CVE-2020-13346

creationtimestamp| type| source ---|---|--- 2020-10-07 18:28:21+00:00| seen| https://t.me/cibsecurity/15111...

CVE-2020-13346

Membership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, allowing guest users to access confidential issues through API...

CVE-2020-13346

CVE-2020-13346 affects GitLab versions prior to 13.2.10, 13.3.7, and 13.4.2, where membership changes are not reflected in ToDo subscriptions. This allows guest users to access confidential issues via the API. The provided documents confirm the affected versions and behavior but do not include a ...