GitLab Community Edition/Enterprise Edition up to 13.0.1 memory allocation

entryeditHistoryDiffjsonxmlCTI

A vulnerability, which was classified as problematic, was found in GitLab Community Edition and Enterprise Edition up to 13.0.1 (Bug Tracking Software). Affected is an unknown part. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

IDCommitedUserFieldChangeRemarksModeratedReasonC
1056154910/26/2020VulD...cve_cnaGitLab Inc.nvd.nist.gov10/26/2020accepted70
1056154810/26/2020VulD...confirm_urlhttps://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13274.jsoncve.mitre.org10/26/2020accepted70
1018998406/21/2020VulD...cwe789 (denial of service)06/21/2020accepted90
1018998206/21/2020VulD...cve_nvd_summaryA security issue allowed achieving Denial of Service attacks through memory exhaustion by uploading malicious artifacts in all previous GitLab versions through 13.0.1mitre.org06/21/2020accepted100
1018998106/21/2020VulD...cve_assigned1590019200mitre.org06/21/2020accepted100
1018997606/21/2020VulD...cvss3_nvd_aHnist.gov06/21/2020accepted100
1018997506/21/2020VulD...cvss3_nvd_iNnist.gov06/21/2020accepted100
1018997406/21/2020VulD...cvss3_nvd_cNnist.gov06/21/2020accepted100
1018997306/21/2020VulD...cvss3_nvd_sUnist.gov06/21/2020accepted100
1018997206/21/2020VulD...cvss3_nvd_uiNnist.gov06/21/2020accepted100
1018997106/21/2020VulD...cvss3_nvd_prNnist.gov06/21/2020accepted100
1018997006/21/2020VulD...cvss3_nvd_acLnist.gov06/21/2020accepted100
1018996906/21/2020VulD...cvss3_nvd_avNnist.gov06/21/2020accepted100
1018994406/21/2020VulD...typeBug Tracking Software06/21/2020accepted100
1018999206/21/2020VulD...cvss3_nvd_basescore7.5nist.gov06/21/2020accepted90
1018999106/21/2020VulD...cvss3_vuldb_rcX06/21/2020accepted90
1018999006/21/2020VulD...cvss3_vuldb_rlX06/21/2020accepted90
1018998906/21/2020VulD...cvss3_vuldb_eX06/21/2020accepted90
1018998806/21/2020VulD...cvss2_vuldb_rcND06/21/2020accepted90
1018998706/21/2020VulD...cvss2_vuldb_rlND06/21/2020accepted90

Interested in the pricing of exploits?

See the underground prices here!