CVE-2020-13352

CVE-2020-13352 is a medium-severity information leakage vulnerability affecting GitLab CE/EE versions 10.2 and above. Specifically, it impacts versions 10.2 to 13.3.8, 13.4 to 13.4.4, and 13.5 to 13.5.1. This flaw allows private group information to be exposed if a project is moved from a private to a public group. The vulnerability has a CVSS score of 5.3, indicating a medium severity. It is easily exploitable over the network with low attack complexity and no user interaction required, leading to a potential loss of confidentiality (C:L). There is no impact on integrity or availability. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. While there is limited community discussion and media coverage, the vulnerability is not listed on the CISA KEV catalog and is considered inactive on the Hot List.