GitLab 1.0 < 13.1.10 / 13.2 < 13.2.8 / 13.3 < 13.3.4 (CVE-2020-13305)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was not invalidating project invitation link upon removing a user from a project. CVE-2020-13305 Note that...

CVE-2020-13305

CVE-2020-13305 affects GitLab versions before 13.1.10, 13.2.8, and 13.3.4. The root cause is that GitLab did not invalidate the project invitation link after removing a user from a project, potentially allowing continued access via lingering invites. The connected documents confirm the affected v...