CVE-2020-13274: High severity gitlab vulnerability
Published Jun 19, 2020
·Updated
A security issue allowed achieving Denial of Service attacks through memory exhaustion by uploading malicious artifacts in all previous GitLab versions through 13.0.1
Affected Software
6 affected components
GitLab GitLab<12.9.8
GitLab GitLab<12.9.8
GitLab GitLab>=12.10.0<12.10.7
GitLab GitLab>=12.10.0<12.10.7
GitLab GitLab=13.0.0
GitLab GitLab=13.0.0
Event History
Jun 19, 2020
CVE Published
via MITRE·09:53 PM
Data Sourced
via MITRE·09:53 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-13274?
CVE-2020-13274 has been classified with a severity that allows for Denial of Service attacks through memory exhaustion.
2
How do I fix CVE-2020-13274?
To mitigate CVE-2020-13274, upgrade GitLab to version 12.9.9 or later, or to version 13.0.1 or later.
3
Which versions of GitLab are affected by CVE-2020-13274?
CVE-2020-13274 affects GitLab versions below 12.9.9 and between 12.10.0 and 12.10.7, as well as version 13.0.0.
4
What type of attack does CVE-2020-13274 allow?
CVE-2020-13274 allows attackers to conduct Denial of Service attacks by exploiting memory exhaustion.
5
What can happen if I do not address CVE-2020-13274?
Failing to address CVE-2020-13274 may result in service downtime due to Denial of Service attacks affecting your GitLab instance.