CVE Vulnerabilities

CVE-2020-13325

Published: Sep 30, 2020 | Modified: Oct 02, 2020
CVSS 3.x
7.1
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
CVSS 2.x
5.5 MEDIUM
AV:N/AC:L/Au:S/C:N/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

A vulnerability was discovered in GitLab versions prior 13.1. The comment section of the issue page was not restricting the characters properly, potentially resulting in a denial of service.

Affected Software

Name Vendor Start Version End Version
Gitlab Gitlab 12.9.0 (including) 12.10.13 (excluding)
Gitlab Gitlab 13.0.0 (including) 13.0.8 (excluding)
Gitlab Gitlab 13.1.0 (including) 13.1.2 (excluding)
Gitlab Ubuntu esm-apps/xenial *
Gitlab Ubuntu xenial *

References