CVE-2020-13353

When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79.0 or above...

CVE-2020-13353

When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79.0 or above...

CVE-2020-13353

CVE-2020-13353 concerns a session-expiration flaw in GitLab’s Gitaly component where one-time use Git credentials imported via URL could be retained longer than intended. The incident is detailed in multiple connected advisories (notably GHSA-MMMM-CHJF-JMVW) which specify the affected software: G...