BIT-gitlab-2020-13306

BIT-gitlab-2020-13306 PUBLISHED CVSS 7.5 HIGH

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Webhook feature could be abused to perform denial of service attacks due to the lack of rate limitation.

Risk Scores

CVSS 3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
Bitnami	gitlab	1.0.0, 13.2.0, 13.3.0

Timeline

Mar 6, 2024 CVE Published
Apr 3, 2025 CVE Updated

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13306.json url
https://gitlab.com/gitlab-org/gitlab/-/issues/223681 url
https://hackerone.com/reports/904134 url
https://nvd.nist.gov/vuln/detail/CVE-2020-13306 url

Open in Interactive Console →