CVE-2020-13291

In GitLab before 13.2.3, project sharing could temporarily allow too permissive access.