CVE-2020-13353

When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79.0 or above

Low · published November 17, 2020

CVSS v3.1
2.5
EPSS
0%
Percentile
19.1
In the wild
Unconfirmed
What it is

When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79.0 or above.

The record
Technical detail
CVSS v3.1
2.5 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00277 · 19.1th percentile
Published
2020-11-17T00:26Z
EPSS history
Timeline
  • 17 NOV 00:26Z
    When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79.0 or above
    cvelistv5