A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was not validating a Deploy-Token and allowed a disabled repository be accessible via a git command line.
| Software | From | Fixed in |
|---|---|---|
| gitlab / gitlab | 13.1.0 | 13.1.10 |
| gitlab / gitlab | 13.2.0 | 13.2.8 |
| gitlab / gitlab | 13.3.0 | 13.3.4 |