CVEvulnerability

CVE-2019-13007

4.9 MEDIUM Published 2020-03-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-03-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.9 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
Weaknesses
CWE-400

Description

An issue was discovered in GitLab Community and Enterprise Edition 11.11 through 12.0.2. When an admin enabled one of the service templates, it was triggering an action that leads to resource depletion. It allows Uncontrolled Resource Consumption.

Affected configurations

• gitlab gitlab (>= 11.11 <= 12.0.2)

Related

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References