Unrated severityNVD Advisory· Published Jan 15, 2021· Updated Aug 4, 2024
CVE-2020-26414
CVE-2020-26414
Description
An issue has been discovered in GitLab affecting all versions starting from 12.4. The regex used for package names is written in a way that makes execution time have quadratic growth based on the length of the malicious input string.
Affected products
3>=12.4+ 1 more
- (no CPE)range: >=12.4
- (no CPE)range: >=12.4, <13.5.6
Patches
Vulnerability mechanics
References
2- gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26414.jsonmitrex_refsource_CONFIRM
- gitlab.com/gitlab-org/gitlab/-/issues/270199mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.