Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-3909

Опубликовано: 06 нояб. 2023
Источник: nvd
CVSS3: 4.3
CVSS3: 6.5
EPSS Низкий

Описание

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.3 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. A Regular Expression Denial of Service was possible by adding a large string in timeout input in gitlab-ci.yml file.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия от 12.3.0 (включая) до 16.3.6 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 12.3.0 (включая) до 16.3.6 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия от 16.4.0 (включая) до 16.4.2 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 16.4.0 (включая) до 16.4.2 (исключая)
cpe:2.3:a:gitlab:gitlab:16.5.0:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:16.5.0:*:*:*:enterprise:*:*:*

EPSS

Процентиль: 5%
0.00023
Низкий

4.3 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-1333
CWE-1333

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 2 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.3 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. A Regular Expression Denial of Service was possible by adding a large string in timeout input in gitlab-ci.yml file.

CVSS3: 4.3
debian
больше 2 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions st ...

CVSS3: 4.3
github
больше 2 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.3 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. A Regular Expression Denial of Service was possible by adding a large string in timeout input in gitlab-ci.yml file.

EPSS

Процентиль: 5%
0.00023
Низкий

4.3 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-1333
CWE-1333