An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.11 prior to 16.11.2. A problem with the processing logic for Google Chat Messages integration may lead to a regular expression DoS attack on the server.
History

Thu, 12 Dec 2024 16:45:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

Thu, 03 Oct 2024 07:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-400

Thu, 03 Oct 2024 06:30:00 +0000

Type Values Removed Values Added
Title Uncontrolled Resource Consumption in GitLab Inefficient Regular Expression Complexity in GitLab
Weaknesses CWE-1333

Thu, 29 Aug 2024 15:15:00 +0000

Type Values Removed Values Added
First Time appeared Gitlab
Gitlab gitlab
CPEs cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*
Vendors & Products Gitlab
Gitlab gitlab

cve-icon MITRE

Status: PUBLISHED

Assigner: GitLab

Published: 2024-05-09T01:38:46.718Z

Updated: 2024-10-03T06:23:17.156Z

Reserved: 2023-12-11T16:30:48.515Z

Link: CVE-2023-6688

cve-icon Vulnrichment

Updated: 2024-08-02T08:35:14.844Z

cve-icon NVD

Status : Analyzed

Published: 2024-05-14T14:35:33.147

Modified: 2024-12-12T16:22:38.713

Link: CVE-2023-6688

cve-icon Redhat

No data.