CVE-2020-26409

creationtimestamp| type| source ---|---|--- 2020-12-11 07:35:21+00:00| seen| https://t.me/cibsecurity/19782 2020-12-11 07:38:20+00:00| seen| https://t.me/cibsecurity/19802 2020-12-11 08:25:39+00:00| seen| https://t.me/cibsecurity/19822 2020-12-11 09:25:34+00:00| seen| https://t.me/cibsecurity/198...

CVE-2020-26409

CVE-2020-26409 affects GitLab CE/EE: 10.3–13.4.7, 13.5 (excluding 13.5.5), 13.6 (excluding 13.6.2). The vulnerability is a denial-of-service arising from bypassing input validation in Markdown fields, enabling an attacker to trigger uncontrolled resource consumption. Connected documents corrobora...