Описание
An issue was discovered in GitLab CE/EE affecting all versions before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that allows unauthenticated users to cause a Denial of Service (DoS) condition while uploading specifically crafted large JSON files.
Ссылки
- Broken Link
Уязвимые конфигурации
Конфигурация 1Версия до 18.2.7 (исключая)Версия до 18.2.7 (исключая)Версия от 18.3.0 (включая) до 18.3.3 (исключая)Версия от 18.3.0 (включая) до 18.3.3 (исключая)
Одно из
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:gitlab:gitlab:18.4.0:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:18.4.0:*:*:*:enterprise:*:*:*
EPSS
Процентиль: 20%
0.00062
Низкий
7.5 High
CVSS3
Дефекты
CWE-770
Связанные уязвимости
CVSS3: 7.5
debian
4 месяца назад
An issue was discovered in GitLab CE/EE affecting all versions before ...
CVSS3: 7.5
github
4 месяца назад
An issue was discovered in GitLab CE/EE affecting all versions before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that allows unauthenticated users to cause a Denial of Service (DoS) condition while uploading specifically crafted large JSON files.
EPSS
Процентиль: 20%
0.00062
Низкий
7.5 High
CVSS3
Дефекты
CWE-770