CVE-2020-13335: GitLab

Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days.

Improper group membership validation when deleting a user account in GitLab >=7.12 allows a user to delete own account without deleting/transferring their group.

Affected products

• GitLab GitLab: from 7.12.0, before 13.2.10 (fixed in 13.2.10); from 13.3.0, before 13.3.7 (fixed in 13.3.7); from 13.4.0, before 13.4.2 (fixed in 13.4.2)

Published 2020-10-07. Last modified 2026-06-17.