Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8h2p-m6f9-v8r7

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A potential DOS vulnerability was discovered in GitLab versions 13.1, 13.2 and 13.3. The api to update an asset as a link from a release had a regex check which caused exponential number of backtracks for certain user supplied values resulting in high CPU usage.

A potential DOS vulnerability was discovered in GitLab versions 13.1, 13.2 and 13.3. The api to update an asset as a link from a release had a regex check which caused exponential number of backtracks for certain user supplied values resulting in high CPU usage.

EPSS

Процентиль: 36%
0.00151
Низкий

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 5 лет назад

A potential DOS vulnerability was discovered in GitLab versions 13.1, 13.2 and 13.3. The api to update an asset as a link from a release had a regex check which caused exponential number of backtracks for certain user supplied values resulting in high CPU usage.

CVSS3: 4.3
nvd
больше 5 лет назад

A potential DOS vulnerability was discovered in GitLab versions 13.1, 13.2 and 13.3. The api to update an asset as a link from a release had a regex check which caused exponential number of backtracks for certain user supplied values resulting in high CPU usage.

CVSS3: 4.3
debian
больше 5 лет назад

A potential DOS vulnerability was discovered in GitLab versions 13.1, ...

EPSS

Процентиль: 36%
0.00151
Низкий

Дефекты

CWE-400