A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. The revocation feature was not revoking all session tokens and one could re-use it to obtain a valid session.
CVSS Score
8.1
EPSS Score
0.002
Published
2020-09-14
Page 46