CVE-2020-13358: 
GitLab vulnerability analysis and mitigation

A vulnerability in the internal Kubernetes agent API in GitLab Community Edition (CE) and Enterprise Edition (EE) version 13.3 and above was discovered that allows unauthorized access to private projects. The vulnerability was identified internally by the GitLab team and assigned CVE-2020-13358. The issue was disclosed on November 2, 2020, and subsequently patched in versions 13.5.2, 13.4.5, and 13.3.9 (GitLab Security, NVD).

The vulnerability affects the internal Kubernetes agent API implementation in GitLab CE/EE. The flaw allows unauthorized access to private projects through the Kubernetes agent API interface (GitLab Security).

The vulnerability enables unauthorized users to gain access to private projects through the Kubernetes agent API, potentially exposing sensitive project data and information (GitLab Security).

The vulnerability was discovered internally by the GitLab team, though no public exploits or active exploitation in the wild have been reported (GitLab Security).

GitLab strongly recommends that all installations running affected versions be upgraded to the latest patched versions: 13.5.2, 13.4.5, or 13.3.9, depending on the installation version (GitLab Security).