GitLab 10.1.0 < 13.2.10 / 13.3 < 13.3.7 / 13.4 < 13.4.2 (CVE-2020-13342)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting versions prior to 13.2.10, 13.3.7 and 13.4.2: Lack of Rate Limiting at Re-Sending Confirmation Email CVE-2020-13342 Note that Nessus has not tested for...

CVE-2020-13342

CVE-2020-13342 affects GitLab prior to 13.2.10, 13.3.7, and 13.4.2 due to a lack of rate limiting on re-sending confirmation emails. This could enable abuse of the email-sending flow. The documented impact is LOW (CVSS 3.1: 2.7; NETWORK / HIGH privileges required; user interaction NONE). Remediat...

CVE-2020-13342

Removed by vendor...