VULNERABILITY INTELLIGENCE
CVE-2020-13306
CVSS score3.7 LOW
EPSS probability1.83%
CISA KEVNot currently listed
Published2020-09-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Description
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Webhook feature could be abused to perform denial of service attacks due to the lack of rate limitation.
Weakness classification
- nvd@nist.gov: CWE-770
Primary references
- cve@gitlab.com — Third Party Advisory
- cve@gitlab.com — Broken Link
- cve@gitlab.com — Permissions Required
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Permissions Required