CVE-2020-13323: 
GitLab vulnerability analysis and mitigation

A vulnerability (CVE-2020-13323) was discovered in GitLab affecting all versions prior to 13.1. The vulnerability allowed private merge requests to be exposed through the Todos feature, potentially leading to unauthorized access to confidential information (GitLab Security Release).

The vulnerability was related to information disclosure through the Todos feature in GitLab. When certain conditions were met, private merge requests could be read via the Todos functionality. The vulnerability has been assigned a CVSS v3.1 score of 7.7 (HIGH) and a CVSS v2.0 score of 4.3 (MEDIUM), indicating significant security impact (NVD Results).

The vulnerability could allow unauthorized users to access private merge request information through the Todos feature, potentially exposing sensitive project data and confidential information (GitLab Security Release).

The vulnerability affected all versions of GitLab prior to version 13.1. It could be exploited through the Todos feature under specific conditions to access private merge requests (GitLab Security Release).

GitLab has addressed this vulnerability in versions 13.1.2, 13.0.8, and 12.10.13. Users are strongly recommended to upgrade their GitLab installations to one of these patched versions immediately (GitLab Security Release).