A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be read via Todos
{
"extracted_events": [
{
"introduced": "8.5.0"
},
{
"fixed": "12.10.13"
},
{
"introduced": "13.0.0"
},
{
"fixed": "13.0.8"
},
{
"introduced": "13.1.0"
},
{
"fixed": "13.1.2"
}
],
"source": "CPE_RANGE",
"cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"
}