CVE-2020-13280

MEDIUM

GitLab <13.0.12-13.2.3 - Memory Corruption

Title source: llm

For GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to excessive logging of an invite email error message.

Core 2

Core References

Broken Link x_refsource_misc

Exploit, Third Party Advisory x_refsource_confirm

CVSS v3 6.5

EPSS 0.0011

EPSS Percentile 28.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-400

Status published

Products (1)

gitlab/gitlab < 13.0.12 (2 CPE variants)

Published Aug 13, 2020

Tracked Since Feb 18, 2026