Lucene search

K
gitlabHttps://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-3038330F423DAEE8073F6D20E681691C
HistorySep 16, 2020 - 12:00 a.m.

Improper Input Validation

2020-09-1600:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
5
improper input validation
xml format
loadurl
denial of service
sigsegv

EPSS

0.005

Percentile

75.3%

xmlquery lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service (SIGSEGV) at xmlquery.(*Node).InnerText or possibly have unspecified other impact.

EPSS

0.005

Percentile

75.3%

Related for GITLAB-3038330F423DAEE8073F6D20E681691C