Medium severity4.3NVD Advisory· Published Dec 11, 2020· Updated Jun 17, 2026
CVE-2020-26411
CVE-2020-26411
Description
A potential DOS vulnerability was discovered in all versions of Gitlab starting from 13.4.x (>=13.4 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2). Using a specific query name for a project search can cause statement timeouts that can lead to a potential DOS if abused.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: >=13.4.0,<13.4.7
- (no CPE)range: >=13.4 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2
- (no CPE)range: >=13.4, <13.4.7
Patches
Vulnerability mechanics
References
2- gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26411.jsonnvdThird Party Advisory
- gitlab.com/gitlab-org/gitlab/-/issues/260330nvdBroken LinkThird Party Advisory
News mentions
0No linked articles in our index yet.