Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-0518

Опубликовано: 13 фев. 2023
Источник: nvd
CVSS3: 4.3
CVSS3: 7.5
EPSS Низкий

Описание

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 before 15.7.6, all versions starting from 15.8 before 15.8.1. It was possible to trigger a DoS attack by uploading a malicious Helm chart.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия от 14.0 (включая) до 15.6.7 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 14.0 (включая) до 15.6.7 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия от 15.7 (включая) до 15.7.6 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 15.7 (включая) до 15.7.6 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия от 15.8 (включая) до 15.8.1 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 15.8 (включая) до 15.8.1 (исключая)

EPSS

Процентиль: 69%
0.00595
Низкий

4.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-400

Связанные уязвимости

CVSS3: 4.3
ubuntu
почти 3 года назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 before 15.7.6, all versions starting from 15.8 before 15.8.1. It was possible to trigger a DoS attack by uploading a malicious Helm chart.

CVSS3: 4.3
debian
почти 3 года назад

An issue has been discovered in GitLab CE/EE affecting all versions st ...

CVSS3: 7.5
github
почти 3 года назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 before 15.7.6, all versions starting from 15.8 before 15.8.1. It was possible to trigger a DoS attack by uploading a malicious Helm chart.

EPSS

Процентиль: 69%
0.00595
Низкий

4.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-400