CVE-2020-13346

Publication date

2020-10-07 13:21:28

Family

GitLab

State

PUBLISHED

Description

Membership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, allowing guest users to access confidential issues through API.