An authorization issue in the mirroring logic allowed read access to private repositories in GitLab CE/EE 10.6 and later through 13.0.5CreditsThanks [@u3mur4](https://hackerone.com/u3mur4) for reporting this vulnerability through our HackerOne bug bounty programReferenceshttps://gitlab.com/gitlab-org/gitlab/-/issues/220972https://hackerone.com/reports/894569https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13277.json