Security Advisory
CVE-2020-13346
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Membership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, allowing guest users to access confidential issues through API.