Описание
An issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15 . It was possible to trigger a DOS by using the math feature with a specific formula in issue comments.
Ссылки
- Third Party Advisory
- ExploitPatchThird Party Advisory
- Permissions RequiredThird Party Advisory
- Third Party Advisory
- ExploitPatchThird Party Advisory
- Permissions RequiredThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 8.15.0 (включая) до 14.6.5 (исключая)Версия от 8.15.0 (включая) до 14.6.5 (исключая)Версия от 14.7.0 (включая) до 14.7.4 (включая)Версия от 14.7.0 (включая) до 14.7.4 (включая)Версия от 14.8.0 (включая) до 14.8.2 (исключая)Версия от 14.8.0 (включая) до 14.8.2 (исключая)
Одно из
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
EPSS
Процентиль: 71%
0.01464
Низкий
3.5 Low
CVSS3
5.7 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-400
Связанные уязвимости
CVSS3: 3.5
ubuntu
больше 4 лет назад
An issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15 . It was possible to trigger a DOS by using the math feature with a specific formula in issue comments.
CVSS3: 3.5
debian
больше 4 лет назад
An issue has been discovered in GitLab CE/EE affecting all versions st ...
CVSS3: 5.7
github
больше 4 лет назад
An issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15 . It was possible to trigger a DOS by using the math feature with a specific formula in issue comments.
EPSS
Процентиль: 71%
0.01464
Низкий
3.5 Low
CVSS3
5.7 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-400