Логотип exploitDog
bind:CVE-2022-1100
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-1100

Количество 4

Количество 4

ubuntu логотип

CVE-2022-1100

почти 4 года назад

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 13.1 prior to 14.7.7, 14.8.0 prior to 14.8.5, and 14.9.0 prior to 14.9.2. The api to update an asset as a link from a release had a regex check which caused exponential number of backtracks for certain user supplied values resulting in high CPU usage.

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2022-1100

почти 4 года назад

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 13.1 prior to 14.7.7, 14.8.0 prior to 14.8.5, and 14.9.0 prior to 14.9.2. The api to update an asset as a link from a release had a regex check which caused exponential number of backtracks for certain user supplied values resulting in high CPU usage.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2022-1100

почти 4 года назад

A potential DOS vulnerability was discovered in GitLab CE/EE affecting ...

CVSS3: 4.3
EPSS: Низкий
github логотип

GHSA-fr4g-hmc7-w66h

почти 4 года назад

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 13.1 prior to 14.7.7, 14.8.0 prior to 14.8.5, and 14.9.0 prior to 14.9.2. The api to update an asset as a link from a release had a regex check which caused exponential number of backtracks for certain user supplied values resulting in high CPU usage.

CVSS3: 4.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2022-1100

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 13.1 prior to 14.7.7, 14.8.0 prior to 14.8.5, and 14.9.0 prior to 14.9.2. The api to update an asset as a link from a release had a regex check which caused exponential number of backtracks for certain user supplied values resulting in high CPU usage.

CVSS3: 4.3
0%
Низкий
почти 4 года назад
nvd логотип
CVE-2022-1100

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 13.1 prior to 14.7.7, 14.8.0 prior to 14.8.5, and 14.9.0 prior to 14.9.2. The api to update an asset as a link from a release had a regex check which caused exponential number of backtracks for certain user supplied values resulting in high CPU usage.

CVSS3: 4.3
0%
Низкий
почти 4 года назад
debian логотип
CVE-2022-1100

A potential DOS vulnerability was discovered in GitLab CE/EE affecting ...

CVSS3: 4.3
0%
Низкий
почти 4 года назад
github логотип
GHSA-fr4g-hmc7-w66h

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 13.1 prior to 14.7.7, 14.8.0 prior to 14.8.5, and 14.9.0 prior to 14.9.2. The api to update an asset as a link from a release had a regex check which caused exponential number of backtracks for certain user supplied values resulting in high CPU usage.

CVSS3: 4.3
0%
Низкий
почти 4 года назад

Уязвимостей на страницу