First published: Thu Aug 13 2020(Updated: )
For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature
Credit: cve@gitlab.com
Affected Software | Affected Version | How to fix |
---|---|---|
GitLab | >=8.9.0<13.0.12 | |
GitLab | >=8.9.0<13.0.12 | |
GitLab | >=13.1.0<13.1.6 | |
GitLab | >=13.1.0<13.1.6 | |
GitLab | >=13.2.0<13.2.3 | |
GitLab | >=13.2.0<13.2.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-13281 has been classified as a denial of service vulnerability.
To fix CVE-2020-13281, upgrade to GitLab versions 13.0.12, 13.1.6, or 13.2.3 or later.
GitLab versions before 13.0.12, 13.1.6, and 13.2.3 are affected by CVE-2020-13281.
The impact of CVE-2020-13281 is that it can lead to denial of service through the project import feature.
Yes, CVE-2020-13281 is exploitable remotely due to its effect within the project import functionality.