CVE-2021-22259

Опубликовано: 04 окт. 2021

Источник: nvd

CVSS3: 4.3

CVSS3: 6.5

CVSS2: 4

EPSS Низкий

Описание

A potential DOS vulnerability was discovered in GitLab EE starting with version 12.6 due to lack of pagination in dependencies API.

Ссылки

https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22259.json
Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/335146
Broken Link
https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22259.json
Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/335146
Broken Link

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

Версия от 12.6.0 (включая) до 14.1.7 (исключая)

EPSS

Процентиль: 51%

0.00282

Низкий

4.3 Medium

CVSS3

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2021-22259

CVSS3: 4.3

ubuntu

больше 3 лет назад

A potential DOS vulnerability was discovered in GitLab EE starting with version 12.6 due to lack of pagination in dependencies API.

CVE-2021-22259

CVSS3: 4.3

debian

больше 3 лет назад

A potential DOS vulnerability was discovered in GitLab EE starting wit ...

GHSA-wrr4-j76w-2847

github

около 3 лет назад

A potential DOS vulnerability was discovered in GitLab EE starting with version 12.6 due to lack of pagination in dependencies API.

EPSS

Процентиль: 51%

0.00282

Низкий

4.3 Medium

CVSS3

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo