Skip to content
OpenAdvisories
Medium · 4.3 CVE-2020-13354 EUVD-2020-5613GHSA-g5mf-xw7v-rmr9

A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 12.6. The container registry name check could cause expo…

Published Nov 17, 2020 · Updated Aug 4, 2024 · Assigned by GitLab

Description

A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 12.6. The container registry name check could cause exponential number of backtracks for certain user supplied values resulting in high CPU usage. Affected versions are: >=12.6, <13.3.9.

Affected products

VendorProductAffectedFixed
GitLab GitLab CE/EE >=12.6, <13.3.9 —

References