CVE-2020-13353

When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79.0 or above.

Score

CVSS 3.1 3.2 Low

Status

Modified - cve@gitlab.com

Published

2020-11-17

Last modified

2024-08-04

Weaknesses

CWE-613

Affected products

• Gitaly (Gitlab)

References

• https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13353.json
• https://gitlab.com/gitlab-org/gitaly/-/issues/2882