Gitlab · Gitlab Ce/Ee · CVE-2019-10113
Name of the Vulnerable Software and Affected Versions:
GitLab Community and Enterprise Edition versions prior to 11.7.8
GitLab Community and Enterprise Edition versions 11.8.x prior to 11.8.4
GitLab Community and Enterprise Edition versions 11.9.x prior to 11.9.2
Description:
An issue allows Uncontrolled Resource Consumption by making concurrent GET "/api/v4/projects/<id>/languages" requests.
Recommendations:
For versions prior to 11.7.8, update to version 11.7.8 or later.
For versions 11.8.x prior to 11.8.4, update to version 11.8.4 or later.
For versions 11.9.x prior to 11.9.2, update to version 11.9.2 or later.