p PatchFirst

CVE-2020-13306

CVE-2020-13306

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Webhook feature could be abused to perform denial of service attacks due to the lack of rate limitation.

CVSS 3.7 · Low · EPSS 1.8%

Published
Updated

Stack: system

Affected products and versions

  • gitlab

    Versions
    • >=1.0, <13.1.10: Affected
    • >=13.2, <13.2.8: Affected
    • >=13.3, <13.3.4: Affected

    No fix published

  • gitlab Ubuntu:16.04:LTS

    Versions
    • 8.4.3+dfsg-9
    • 8.4.3+dfsg-12
    • 8.5.8+dfsg-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →