Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6hch-mpjp-2743

Опубликовано: 26 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

An issue has been discovered in GitLab CE/EE affecting all versions from 12.7 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 It was possible for an attacker to trigger a Regular Expression Denial of Service via a Cargo.toml containing maliciously crafted input.

An issue has been discovered in GitLab CE/EE affecting all versions from 12.7 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 It was possible for an attacker to trigger a Regular Expression Denial of Service via a Cargo.toml containing maliciously crafted input.

EPSS

Процентиль: 44%
0.00212
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-1333

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 2 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions from 12.7 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 It was possible for an attacker to trigger a Regular Expression Denial of Service via a `Cargo.toml` containing maliciously crafted input.

CVSS3: 6.5
nvd
около 2 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions from 12.7 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 It was possible for an attacker to trigger a Regular Expression Denial of Service via a `Cargo.toml` containing maliciously crafted input.

CVSS3: 6.5
debian
около 2 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions fr ...

CVSS3: 6.5
fstec
около 2 лет назад

Уязвимость файла Cargo.toml программной платформы на базе git для совместной работы над кодом GitLab, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 44%
0.00212
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-1333