Skip to content
fr Sign in
2.5 Low

CVE-2020-13353 When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly…

Description

When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79.0 or above.

Affected products and versions

Product Affected versions Fixed in
Gitaly 13.5 13.5 → < 13.5.2 13.5.2
Gitaly 13.4 13.4 → < 13.4.5 13.4.5
Gitaly 1.79 1.79.0 → < 13.3.9 13.3.9

References

Timeline

  1. Published
  2. Last modified
Track this CVE