Описание
A vulnerability was discovered in GitLab starting with version 12.2 that allows an attacker to cause uncontrolled resource consumption with a specially crafted file.
Ссылки
- Vendor Advisory
- Broken Link
- Permissions RequiredThird Party Advisory
- Vendor Advisory
- Broken Link
- Permissions RequiredThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 12.2.0 (включая) до 14.1.7 (исключая)Версия от 12.2.0 (включая) до 14.1.7 (исключая)Версия от 14.2 (включая) до 14.2.5 (исключая)Версия от 14.2 (включая) до 14.2.5 (исключая)Версия от 14.3 (включая) до 14.3.1 (исключая)Версия от 14.3 (включая) до 14.3.1 (исключая)
Одно из
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
EPSS
Процентиль: 59%
0.01009
Низкий
7.7 High
CVSS3
5.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-400
Связанные уязвимости
CVSS3: 7.7
ubuntu
почти 5 лет назад
A vulnerability was discovered in GitLab starting with version 12.2 that allows an attacker to cause uncontrolled resource consumption with a specially crafted file.
CVSS3: 7.7
debian
почти 5 лет назад
A vulnerability was discovered in GitLab starting with version 12.2 th ...
github
около 4 лет назад
A vulnerability was discovered in GitLab starting with version 12.2 that allows an attacker to cause uncontrolled resource consumption with a specially crafted file.
EPSS
Процентиль: 59%
0.01009
Низкий
7.7 High
CVSS3
5.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-400