Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-2818

Опубликовано: 28 мар. 2024
Источник: nvd
CVSS3: 4.3
CVSS3: 6.5
EPSS Низкий

Описание

An issue has been discovered in GitLab CE/EE affecting all versions before 16.8.5, all versions starting from 16.9 before 16.9.3, all versions starting from 16.10 before 16.10.1. It was possible for an attacker to cause a denial of service using malicious crafted description parameter for labels.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия до 16.8.5 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия до 16.8.5 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия от 16.9.0 (включая) до 16.9.3 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 16.9.0 (включая) до 16.9.3 (исключая)
cpe:2.3:a:gitlab:gitlab:16.10.0:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:16.10.0:*:*:*:enterprise:*:*:*

EPSS

Процентиль: 6%
0.00025
Низкий

4.3 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-770
CWE-770

Связанные уязвимости

CVSS3: 4.3
ubuntu
почти 2 года назад

An issue has been discovered in GitLab CE/EE affecting all versions before 16.8.5, all versions starting from 16.9 before 16.9.3, all versions starting from 16.10 before 16.10.1. It was possible for an attacker to cause a denial of service using malicious crafted description parameter for labels.

CVSS3: 4.3
debian
почти 2 года назад

An issue has been discovered in GitLab CE/EE affecting all versions be ...

CVSS3: 4.3
github
почти 2 года назад

An issue has been discovered in GitLab CE/EE affecting all versions before 16.8.5, all versions starting from 16.9 before 16.9.3, all versions starting from 16.10 before 16.10.1. It was possible for an attacker to cause a denial of service using malicious crafted description parameter for labels.

EPSS

Процентиль: 6%
0.00025
Низкий

4.3 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-770
CWE-770