Aller au contenu
en Se connecter
4.3 Moyenne

CVE-2020-13349 An issue has been discovered in GitLab EE affecting all versions starting from 8.12

Description

An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a file path resulted in the Advanced Search feature susceptible to catastrophic backtracking. Affected versions are >=8.12, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2.

Produits et versions touchés

Produit Versions touchées Corrigé en
GitLab EE 13.5 premières → dernières 13.5.2
GitLab EE 13.4 premières → dernières 13.4.5
GitLab EE 13.3 premières → < 13.3.9 13.3.9
GitLab EE 8.12 8.12 → dernières Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de GitLab EE

Les 10 CVE de GitLab EE →
CVE-2021-22240 Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on… 4.2 Moyenne CVE-2020-26412 Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics… 3.1 Faible CVE-2020-26416 Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms… 4.0 Moyenne CVE-2020-13348 An issue has been discovered in GitLab EE affecting all versions starting from 10.2 5.7 Moyenne
Suivre cette CVE