CVE-2019-10113: High severity gitlab vulnerability
An issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. Making concurrent GET /api/v4/projects/<id>/languages requests may allow Uncontrolled Resource Consumption.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-10113?
CVE-2019-10113 has a medium severity classification due to its potential for uncontrolled resource consumption.
How do I fix CVE-2019-10113?
To fix CVE-2019-10113, upgrade GitLab to version 11.7.9, 11.8.4, or 11.9.2 or later.
Which GitLab versions are affected by CVE-2019-10113?
CVE-2019-10113 affects GitLab Community and Enterprise Editions prior to 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2.
What kind of issue does CVE-2019-10113 represent?
CVE-2019-10113 represents an issue related to concurrent API requests causing uncontrolled resource consumption.
Is there a workaround for CVE-2019-10113?
There are no specific workarounds for CVE-2019-10113, so it is recommended to update to a patched version.