CVE-2019-19313

Published: Jan 5, 2020Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

GitLab EE 12.3 through 12.5, 12.4.3, and 12.3.6 allows Denial of Service. Certain characters were making it impossible to create, edit, or view issues and commits.

Affected (3)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	From 12.3.0 to 12.3.8
Gitlab Gitlab	From 12.4.0 to 12.4.5
Gitlab Gitlab	From 12.5.0 to 12.5.2

Related CWEs

CWE-755

Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.

References (6)

https://about.gitlab.com/blog/2019/11/27/security-release-gitlab-12-5-1-released/

Source: cve@mitre.org

Vendor Advisory

https://about.gitlab.com/blog/categories/releases/

Source: cve@mitre.org

Release Notes

https://gitlab.com/gitlab-org/gitlab/issues/14947

Source: cve@mitre.org

Broken Link

https://about.gitlab.com/blog/2019/11/27/security-release-gitlab-12-5-1-released/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://about.gitlab.com/blog/categories/releases/

Source: af854a3a-2127-422b-91ae-364da2661108

Release Notes

https://gitlab.com/gitlab-org/gitlab/issues/14947

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

Timeline

No history available yet.