Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2023-0632

Опубликовано: 02 авг. 2023
Источник: redhat
EPSS Низкий

Описание

An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A Regular Expression Denial of Service was possible by using crafted payloads to search Harbor Registry.

Отчет

The GitLab package used in OpenShift is a GitLab API NodeJS library which is not affected by CVE-2023-0632.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat OpenShift Container Platform 4openshift4/ose-consoleNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=2228520gitlab: ReDoS when sending crafted payloads to specific registry

EPSS

Процентиль: 50%
0.00263
Низкий

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 2 года назад

An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A Regular Expression Denial of Service was possible by using crafted payloads to search Harbor Registry.

CVSS3: 6.5
nvd
почти 2 года назад

An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A Regular Expression Denial of Service was possible by using crafted payloads to search Harbor Registry.

CVSS3: 6.5
debian
почти 2 года назад

An issue has been discovered in GitLab affecting all versions starting ...

CVSS3: 6.5
github
почти 2 года назад

An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A Regular Expression Denial of Service was possible by using crafted payloads to search Harbor Registry.

EPSS

Процентиль: 50%
0.00263
Низкий