PT-2019-14344 · Gitlab · Gitlab Ce/Ee+1
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
GitLab Community and Enterprise Edition versions 8.15 through 12.2.1
Description
An issue was discovered that allows particular mathematical expressions in GitLab Markdown to exhaust client resources.
Recommendations
For versions 8.15 through 12.2.1, update to a version that contains a fix for this issue to prevent client resource exhaustion.
Correção
Allocation of Resources Without Limits
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Gitlab
Gitlab Ce/Ee