CVE-2020-13349
MEDIUMGitLab 8.12.0-13.3.8, 13.4.0-13.4.4, 13.5.0-13.5.1 - Denial of Service via Advanced Search Regex
Title source: llmDescription
An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a file path resulted in the Advanced Search feature susceptible to catastrophic backtracking. Affected versions are >=8.12, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2.
References (2)
Core 2
Core References
Broken Link x_refsource_misc
https://gitlab.com/gitlab-org/gitlab/-/issues/257497
Vendor Advisory x_refsource_confirm
https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13349.json
Scores
CVSS v3
4.3
EPSS
0.0017
EPSS Percentile
37.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Details
CWE
CWE-400
Status
published
Products (1)
gitlab/gitlab
8.12.0 - 13.3.9
Published
Nov 17, 2020
Tracked Since
Feb 18, 2026