CVE-2020-13281

2020-08-1314:15:20

Google

osv.dev

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.6%

For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature

CPENameOperatorVersion
gitlabeq13.1.3-ee
gitlabeq13.1.4-ee
gitlabeq13.1.0-ee
gitlabeq13.1.2-ee
gitlabeq13.1.5-ee
gitlabeq13.1.1-ee

Name	Operator	Version
gitlab	eq	13.1.3-ee
gitlab	eq	13.1.4-ee
gitlab	eq	13.1.0-ee
gitlab	eq	13.1.2-ee
gitlab	eq	13.1.5-ee
gitlab	eq	13.1.1-ee

References

gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13281.json

gitlab.com/gitlab-org/gitlab/-/issues/31564

hackerone.com/reports/687730