Security Advisory

CVE-2024-2800

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-08-08 10:31:37
Last updated 2024-08-30 13:24:42
Assigner GitLab
State PUBLISHED

Description

ReDoS flaw in RefMatcher when matching branch names using wildcards in GitLab EE/CE affecting all versions from 11.3 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2 allows denial of service via Regex backtracking.