A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the private activity of a user could be exposed via the API.
{
"extracted_events": [
{
"introduced": "9.4.0"
},
{
"fixed": "12.10.13"
},
{
"introduced": "13.0.0"
},
{
"fixed": "13.0.8"
},
{
"introduced": "13.1.0"
},
{
"fixed": "13.1.2"
}
],
"source": "CPE_FIELD",
"cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"
}