Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-13353
2.5
LOWCVSS v3
Severity scale
010
Description
When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79.0 or above.
gitlab-org/gitalyGitLabGitaly is a Git RPC service for handling all the git calls made by GitLab
GitLabGitaly is a Git RPC service for handling all the git calls made by GitLab>= 13.5.0, < 13.5.2, >= 13.4.0, < 13.4.5, >= 1.79.0, < 13.3.9NVD