CVE-2020-13352

Private group info is leaked leaked in GitLab CE/EE version 10.2 and above, when the project is moved from private to public group. Affected versions are: =10.2, =13.4, =13.5, 13.5.2...

GitLab 10.2 < 13.3.9 / 13.4 < 13.4.5 / 13.5 < 13.5.2 (CVE-2020-13352)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Private group info is leaked leaked in GitLab CE/EE version 10.2 and above, when the project is moved from private to public group. Affected versions are: =10.2, =13.4, =13.5, =10.2, =13.4, =13.5,...

CVE-2020-13352

GitLab CVE-2020-13352 affects GitLab CE/EE versions 10.2 through 13.3.8, 13.4 through 13.4.4, and 13.5 through 13.5.1, where private group information is leaked when moving a project from a private to a public group. Root cause: information leakage in group visibility handling during transfers. R...