Beveiligingsadvies

CVE-2023-2198

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-06-07 00:00:00
Laatst bijgewerkt 2025-01-07 16:46:54
Toegewezen door GitLab
CVSS-score 7.5
Status PUBLISHED

Beschrijving

An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.7 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A Regular Expression Denial of Service was possible via sending crafted payloads to the preview_markdown endpoint.