HIGH

CVE-2019-15736

Gitlab GitLab 2019-09-16 CVSS v3.1

CVSS

7.5

Description

An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Under certain circumstances, CI pipelines could potentially be used in a denial of service attack.

Weakness (CWE)

CWE-770 Resource Allocation Without Limits

EPSS Score

2.04%

Probability of exploitation in next 30 days

80.2th percentile

References

https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ Release Notes, Vendor Advisory https://gitlab.com/gitlab-org/gitlab-ce/issues/51401 Broken Link

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE