Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-13011
HistoryMar 10, 2020 - 6:15 p.m.

Code injection

2020-03-1018:15:00
PRIOn knowledge base
www.prio-n.com
4

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

An issue was discovered in GitLab Enterprise Edition 8.11.0 through 12.0.2. By using brute-force a user with access to a project, but not it’s repository could create a list of merge requests template names. It has excessive algorithmic complexity.

CPENameOperatorVersion
gitlabge8.11.0
gitlable12.0.2

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%