CVE-2019-13011
10.03.2020, 18:15
An issue was discovered in GitLab Enterprise Edition 8.11.0 through 12.0.2. By using brute-force a user with access to a project, but not it's repository could create a list of merge requests template names. It has excessive algorithmic complexity.Enginsight
| Vendor | Product | Version |
|---|---|---|
| gitlab | gitlab | 8.11.0 ≤ 𝑥 ≤ 12.0.2 |
𝑥
= Vulnerable software versions
Ubuntu Releases