PT-2021-22726
CVE-2021-39880
·
تاريخ النشر
2021-10-05
·
تاريخ التحديث
2024-03-06
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
GitLab CE/EE versions 11.9 through 14.0.8
GitLab CE/EE versions 14.1 through 14.1.3
GitLab CE/EE versions 14.2 through 14.2.1
Description:
A Denial Of Service issue in the apollo upload server Ruby gem allows an attacker to deny access to all users via specially crafted requests to the apollo upload server middleware.
Recommendations:
For versions 11.9 through 14.0.8, update to version 14.0.9 or later.
For versions 14.1 through 14.1.3, update to version 14.1.4 or later.
For versions 14.2 through 14.2.1, update to version 14.2.2 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾