Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerable regular expression pattern in GitLab CE/EE since version 8.15 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an attacker to cause uncontrolled resource consumption leading to Denial of Service via specially crafted deploy Slash commands
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
Vulnerability Type
N/A
Vulnerability Title
GitLab 资源管理错误漏洞
Vulnerability Description
GitLab是美国GitLab公司的一个开源的端到端软件开发平台，具有内置的版本控制、问题跟踪、代码审查、CI/CD（持续集成和持续交付）等功能。 GitLab CE/EE 存在资源管理错误漏洞，该漏洞源于从 12.10 到 14.3.6，14.4.4 之前从 14.4 开始的所有版本，所有14.5.2 之前的 14.5 版本中正则表达式用于处理用户输入（笔记、评论等）很容易受到 DOS 攻击的回溯。
CVSS Information
N/A
Vulnerability Type
N/A