Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v52q-48v6-rmj4

Опубликовано: 26 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1, that allows an attacker to cause uncontrolled CPU consumption, potentially leading to a Denial of Service (DoS) condition while using specific GraphQL queries.

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1, that allows an attacker to cause uncontrolled CPU consumption, potentially leading to a Denial of Service (DoS) condition while using specific GraphQL queries.

EPSS

Процентиль: 19%
0.0006
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-770

Связанные уязвимости

CVSS3: 4.3
nvd
3 месяца назад

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1, that allows an attacker to cause uncontrolled CPU consumption, potentially leading to a Denial of Service (DoS) condition while using specific GraphQL queries.

CVSS3: 4.3
debian
3 месяца назад

An issue was discovered in GitLab CE/EE affecting all versions startin ...

CVSS3: 7.5
fstec
3 месяца назад

Уязвимость компонента GraphQL API программной платформы на базе git для совместной работы над кодом GitLab, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 19%
0.0006
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-770