CVE-2020-13353

3.2 lowEPSS 0.3%

Low (3.2) in gitlab gitaly. EPSS 0.3% chance of exploitation in the next 30 days. Fixed in gitaly 13.3.9, 13.4.5, 13.5.2.

When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79.0 or above.

Severity

3.2 low

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWE: CWE-613
Published: 2020-11-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-mmmm-chjf-jmvw	RubyGems	gitaly	>=1.79.0 <13.3.9	13.3.9
GHSA-mmmm-chjf-jmvw	RubyGems	gitaly	>=13.4 <13.4.5	13.4.5
GHSA-mmmm-chjf-jmvw	RubyGems	gitaly	>=13.5 <13.5.2	13.5.2