Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2020-10073: GitLab EE 12.4.2‑12.8.1 can crash project home page
CVE-2020-10073 · published 6 years ago
Summary
Versions of GitLab Enterprise Edition from 12.4.2 up to 12.8.1 may experience a slowdown or stop working when users view a project's main page due to a flaw in permission checks. This could temporarily prevent team members from accessing project information. Updating GitLab to a newer release that includes the fix will restore normal access.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| gitlab | gitlab |
>= 12.4.2, <= 12.8.1 cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* |
Original advisory text
GitLab EE 12.4.2 through 12.8.1 allows Denial of Service. It was internally discovered that a potential denial of service involving permissions checks could impact a project home page.
GitLab EE 12.4.2 through 12.8.1 allows Denial of Service. It was internally discovered that a potential denial of service involving permissions checks could impact a project home page.
References
- https://about.gitlab.com/releases/2020/03/04/gitlab-12-dot-8-dot-2-released/ Release Notes Vendor Advisory
- https://about.gitlab.com/releases/2020/03/04/gitlab-12-dot-8-dot-2-released/inde... Release Notes Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published13 Mar 2020
Updated4 Nov 2026
First seen24 Aug 2026
Track software like this
Free during beta