PT-2020-10133

CVE-2019-19313

·

Published

2020-01-05

·

Updated

2021-07-21

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions GitLab EE versions 12.3 through 12.5 GitLab EE version 12.4.3 GitLab EE version 12.3.6
Description The issue allows Denial of Service. Certain characters were making it impossible to create, edit, or view issues and commits.
Recommendations For GitLab EE versions 12.3 through 12.5, update to a version that does not contain this issue. For GitLab EE version 12.4.3, update to a version that does not contain this issue. For GitLab EE version 12.3.6, update to a version that does not contain this issue. As a temporary workaround, consider restricting the use of certain characters to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾