Rodrigopetteron

**Name of the Vulnerable Software and Affected Versions** GitLab CE/EE versions 13.7 and later **Description** The issue is related to a confusion between tag and branch names in GitLab, allowing a remote attacker to access confidential data. Specifically, it enables a Developer to access protected CI variables that should only be accessible to Maintainers. **Recommendations** For GitLab CE/EE versions 13.7 and later, update to a version that includes the fix for this issue to prevent unauthorized access to protected CI variables. At the moment, there is no information about a newer version that contains a fix for this vulnerability.