2021-10-05 13:38:07
GitLab
PUBLISHED
In all versions of GitLab CE/EE since version 8.0, access tokens created as part of admins impersonation of a user are not cleared at the end of impersonation which may lead to unnecessary sensitive info disclosure.