An issue has been discovered in GitLab CE/EE affecting all versions before 16.9.7, all versions starting from 16.10 before 16.10.5, all versions starting from 16.11 before 16.11.2. It was possible for an attacker to cause a denial of service using maliciously crafted markdown content.
Metrics
Affected Vendors & Products
References
History
Thu, 12 Dec 2024 22:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
CPEs | cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:* cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* |
Mon, 07 Oct 2024 19:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Thu, 03 Oct 2024 07:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Weaknesses | CWE-400 |
Thu, 03 Oct 2024 06:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Title | Uncontrolled Resource Consumption in GitLab | Inefficient Regular Expression Complexity in GitLab |
Weaknesses | CWE-1333 |
Thu, 29 Aug 2024 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Gitlab
Gitlab gitlab |
|
CPEs | cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:* | |
Vendors & Products |
Gitlab
Gitlab gitlab |
MITRE
Status: PUBLISHED
Assigner: GitLab
Published: 2024-05-09T01:38:31.730Z
Updated: 2024-10-03T06:23:18.818Z
Reserved: 2024-03-19T14:30:39.695Z
Link: CVE-2024-2651
Vulnrichment
Updated: 2024-08-01T19:18:48.247Z
NVD
Status : Analyzed
Published: 2024-05-14T15:20:14.557
Modified: 2024-12-12T22:00:20.573
Link: CVE-2024-2651
Redhat
No data.