Description
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.3 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1. A Regular Expression Denial of Service was possible via sending crafted payloads to the preview_markdown endpoint.
Published: 2023-07-13
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

Vendor Solution

Upgrade to versions 16.1.1, 16.0.6, 15.11.10 or above.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-44090 An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.3 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1. A Regular Expression Denial of Service was possible via sending crafted payloads to the preview_markdown endpoint.
History

Wed, 30 Oct 2024 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 03 Oct 2024 07:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-400

Thu, 03 Oct 2024 06:30:00 +0000

Type Values Removed Values Added
Title Uncontrolled Resource Consumption in GitLab Inefficient Regular Expression Complexity in GitLab

Subscriptions

Gitlab Gitlab
cve-icon MITRE

Status: PUBLISHED

Assigner: GitLab

Published:

Updated: 2024-10-30T19:29:27.116Z

Reserved: 2023-06-27T05:16:56.910Z

Link: CVE-2023-3424

cve-icon Vulnrichment

Updated: 2024-08-02T06:55:03.222Z

cve-icon NVD

Status : Modified

Published: 2023-07-13T03:15:10.347

Modified: 2024-11-21T08:17:14.207

Link: CVE-2023-3424

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses