Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2024-2829

Опубликовано: 25 апр. 2024
Источник: redhat
CVSS3: 7.5
EPSS Средний

Описание

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.5 before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1. A crafted wildcard filter in FileFinder may lead to a denial of service.

A flaw was found in GitLab CE/EE. This issue contains a crafted wildcard filter in FileFinder that may lead to a denial of service and affects all versions starting from 12.5 through 16.9.6, 16.10 through 16.10.4, and 16.11 through 16.11.1.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat OpenShift Container Platform 4openshift4/ose-consoleWill not fix

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-400
https://bugzilla.redhat.com/show_bug.cgi?id=2277137gitlab: crafted wildcard filter in FileFinder may lead to a denial of service

EPSS

Процентиль: 98%
0.25965
Средний

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 2 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.5 before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1. A crafted wildcard filter in FileFinder may lead to a denial of service.

CVSS3: 7.5
nvd
больше 2 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.5 before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1. A crafted wildcard filter in FileFinder may lead to a denial of service.

CVSS3: 7.5
debian
больше 2 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions st ...

CVSS3: 7.5
github
больше 2 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.5 before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1. A crafted wildcard filter in FileFinder may lead to a denial of service.

CVSS3: 7.5
fstec
больше 2 лет назад

Уязвимость компонента Wildcard Filter Handler программной платформы на базе git для совместной работы над кодом GitLab, позволяющая нарушителю выполнить атаку типа «отказ в обслуживании»

EPSS

Процентиль: 98%
0.25965
Средний

7.5 High

CVSS3