PT-2020-9364
CVE-2019-13010
·
تاريخ النشر
2020-03-10
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 3.1
5.9
متوسطةالمقاييسAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
GitLab Enterprise Edition versions 8.3 through 12.0.2
Description:
An issue was discovered in the color codes decoder, which was vulnerable to a resource depletion attack if specific formats were used, allowing Uncontrolled Resource Consumption. The issue also involves Incorrect Access Control.
Recommendations:
For GitLab Enterprise Edition versions 8.3 through 12.0.2, consider disabling the color codes decoder as a temporary workaround until a patch is available. Restrict access to the color codes decoder module to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾