An issue has been discovered in GitLab affecting all versions starting from 12.1. Incorrect headers in specific project page allows attacker to have a temporary read access to the private repository
| Software | From | Fixed in |
|---|---|---|
| gitlab / gitlab | 13.7.0 | 13.7.2 |
| gitlab / gitlab | 13.6.0 | 13.6.4 |
| gitlab / gitlab | 12.1.0 | 13.5.6 |