Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-83vq-rvff-66gw

Опубликовано: 22 окт. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 10

Описание

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server due to integer overflow when compiling a specially crafted regular expression.

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server due to integer overflow when compiling a specially crafted regular expression.

EPSS

Процентиль: 72%
0.01349
Низкий

10 Critical

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 9.8
redhat
18 дней назад

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server due to integer overflow when compiling a specially crafted regular expression.

CVSS3: 10
nvd
18 дней назад

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server due to integer overflow when compiling a specially crafted regular expression.

CVSS3: 10
msrc
11 дней назад

Integer Overflow or Wraparound in GitLab

CVSS3: 10
debian
18 дней назад

An issue has been discovered in GitLab CE/EE affecting all versions fr ...

CVSS3: 10
fstec
19 дней назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с целочисленным переполнением, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 72%
0.01349
Низкий

10 Critical

CVSS3

Дефекты

CWE-190