Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-3364
HistoryAug 02, 2023 - 12:15 a.m.

Code injection

2023-08-0200:15:00
PRIOn knowledge base
www.prio-n.com
3
gitlab
vulnerability
code injection
autolinkfilter
regular expression
denial of service
nvd
security issue
version 8.14
version 16.0.8
version 16.1
version 16.1.3
version 16.2
version 16.2.2
crafted payloads
preview_markdown endpoint

7.2 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.14 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A Regular Expression Denial of Service was possible via sending crafted payloads which use AutolinkFilter to the preview_markdown endpoint.

7.2 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%