Skip to content
Sign in
2.5 Low

CVE-2020-13353 When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly…

Description

When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79.0 or above.

Affected products and versions

Product Affected versions Fixed in
Gitaly 13.5 13.5 → < 13.5.2 13.5.2
Gitaly 13.4 13.4 → < 13.4.5 13.4.5
Gitaly 1.79 1.79.0 → < 13.3.9 13.3.9
Track this CVE