CVE-2019-13003 (NVD)

2020-03-10

An issue was discovered in GitLab Community and Enterprise Edition before 12.0.3. One of the parsers used by Gilab CI was vulnerable to a resource exhaustion attack. It allows Uncontrolled Resource Consumption.

Products Gitlab
Type Uncontrolled Resource Consumption (CWE-400)
First patch - None (likely due to unavailable code)
Links https://about.gitlab.com/blog/categories/releases/
https://about.gitlab.com/releases/2019/07/03/security-release-gitlab-12-dot-0-dot-3-released/