Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-0518

Опубликовано: 13 фев. 2023
Источник: nvd
CVSS3: 4.3
CVSS3: 7.5
EPSS Низкий

Описание

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 before 15.7.6, all versions starting from 15.8 before 15.8.1. It was possible to trigger a DoS attack by uploading a malicious Helm chart.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия от 14.0 (включая) до 15.6.7 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 14.0 (включая) до 15.6.7 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия от 15.7 (включая) до 15.7.6 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 15.7 (включая) до 15.7.6 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия от 15.8 (включая) до 15.8.1 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 15.8 (включая) до 15.8.1 (исключая)

EPSS

Процентиль: 84%
0.02151
Низкий

4.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-400

Связанные уязвимости

CVSS3: 4.3
ubuntu
около 3 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 before 15.7.6, all versions starting from 15.8 before 15.8.1. It was possible to trigger a DoS attack by uploading a malicious Helm chart.

CVSS3: 4.3
debian
около 3 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions st ...

CVSS3: 7.5
github
около 3 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 before 15.7.6, all versions starting from 15.8 before 15.8.1. It was possible to trigger a DoS attack by uploading a malicious Helm chart.

EPSS

Процентиль: 84%
0.02151
Низкий

4.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-400