Description


An uncontrolled resource consumption issue when parsing URLs in GitLab CE/EE affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to cause performance issues and potentially a denial of service on the GitLab instance.

Related CPE's


a

gitlab

gitlab

6

Weaknesses



CWE-400

134c704f-9b21-4f2e-91b3-4a467353bcc0

Secondary

CWE-400

CVSS impact metrics


CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5.3 · Medium

Information


Source identifier

[email protected]

Vulnerability status

Modified

Published

2022-11-09T23:15:22.620Z

3 years ago

Last modified

2025-05-01T18:15:34.673Z

9 months ago