Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f48g-wqmg-9r45

Опубликовано: 08 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions starting with 15.9 before 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2. It is possible for an attacker to cause catastrophic backtracking while parsing results from Elasticsearch.

A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions starting with 15.9 before 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2. It is possible for an attacker to cause catastrophic backtracking while parsing results from Elasticsearch.

EPSS

Процентиль: 66%
0.00538
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 4.3
ubuntu
11 месяцев назад

A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions starting with 15.9 before 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2. It is possible for an attacker to cause catastrophic backtracking while parsing results from Elasticsearch.

CVSS3: 4.3
nvd
11 месяцев назад

A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions starting with 15.9 before 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2. It is possible for an attacker to cause catastrophic backtracking while parsing results from Elasticsearch.

CVSS3: 4.3
debian
11 месяцев назад

A Denial of Service (DoS) condition has been discovered in GitLab CE/E ...

CVSS3: 4.3
fstec
11 месяцев назад

Уязвимость поисковой системы Elasticsearch программной платформы на базе git для совместной работы над кодом GitLab, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 66%
0.00538
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-400