An issue has been discovered in GitLab CE/EE affecting all versions from 13.8 and above allowing an authenticated user to delete incident metric images of public projects.
| Software | From | Fixed in |
|---|---|---|
| gitlab / gitlab | 13.10.0 | 13.10.1 |
| gitlab / gitlab | 13.9.0 | 13.9.5 |
| gitlab / gitlab | 13.8.0 | 13.8.7 |