CVE-2019-13007

MEDIUM

GitLab 11.11-12.0.2 - Uncontrolled Resource Consumption via Service Template Enablement

Title source: llm
STIX 2.1

Description

An issue was discovered in GitLab Community and Enterprise Edition 11.11 through 12.0.2. When an admin enabled one of the service templates, it was triggering an action that leads to resource depletion. It allows Uncontrolled Resource Consumption.

References (2)

Core 2
Core References
Release Notes, Vendor Advisory x_refsource_misc
https://about.gitlab.com/blog/categories/releases/

Scores

CVSS v3 4.9
EPSS 0.0016
EPSS Percentile 36.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-400
Status published
Products (1)
gitlab/gitlab 11.11 - 12.0.2 (2 CPE variants)
Published Mar 10, 2020
Tracked Since Feb 18, 2026