CVE-2020-13333: 
GitLab vulnerability analysis and mitigation

A potential Denial of Service (DoS) vulnerability was discovered in GitLab versions 13.1, 13.2, and 13.3, identified as CVE-2020-13333. The vulnerability was found in the release API where certain user-supplied values could cause increased CPU usage. The issue was disclosed on October 1, 2020, and affected GitLab Community Edition (CE) and Enterprise Edition (EE) (GitLab Security Release, NVD).

The vulnerability specifically affected the API endpoint used to update an asset as a link from a release. When processing certain user-supplied values, the system would experience elevated CPU usage, potentially leading to a denial of service condition (GitLab Security Release).

If exploited, the vulnerability could lead to a Denial of Service condition through excessive CPU consumption, potentially affecting the availability of the GitLab instance (GitLab Security Release).

The vulnerability was discovered and reported responsibly by security researcher @anyday. There are no public reports of this vulnerability being exploited in the wild (GitLab Security Release).

GitLab addressed this vulnerability in versions 13.4.2, 13.3.7, and 13.2.10. Users running affected versions are strongly recommended to upgrade to one of these patched versions immediately (GitLab Security Release).