PT-2022-11090
CVE-2021-39942
·
تاريخ النشر
2022-01-18
·
تاريخ التحديث
2024-03-06
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
GitLab CE/EE versions 12.0 through 14.3.5
GitLab CE/EE versions 14.4 through 14.4.3
GitLab CE/EE versions 14.5 through 14.5.1
Description
A denial of service issue allows low-privileged users to bypass file size limits in the NPM package repository, potentially causing denial of service.
Recommendations
For GitLab CE/EE versions 12.0 through 14.3.5, update to version 14.3.6 or later.
For GitLab CE/EE versions 14.4 through 14.4.3, update to version 14.4.4 or later.
For GitLab CE/EE versions 14.5 through 14.5.1, update to version 14.5.2 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾