Skip to content
fr Sign in
4.3 Medium

CVE-2020-13349 An issue has been discovered in GitLab EE affecting all versions starting from 8.12

Description

An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a file path resulted in the Advanced Search feature susceptible to catastrophic backtracking. Affected versions are >=8.12, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2.

Affected products and versions

Product Affected versions Fixed in
GitLab EE 13.5 earliest → latest 13.5.2
GitLab EE 13.4 earliest → latest 13.4.5
GitLab EE 13.3 earliest → < 13.3.9 13.3.9
GitLab EE 8.12 8.12 → latest No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of GitLab EE

The 10 CVEs of GitLab EE →
CVE-2021-22240 Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on… 4.2 Medium CVE-2020-26412 Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics… 3.1 Low CVE-2020-26416 Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms… 4.0 Medium CVE-2020-13348 An issue has been discovered in GitLab EE affecting all versions starting from 10.2 5.7 Medium
Track this CVE