Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-3994
HistoryAug 02, 2023 - 1:15 a.m.

Design/Logic Flaw

2023-08-0201:15:00
PRIOn knowledge base
www.prio-n.com
3
gitlab
ce
ee
version 9.3
version 16.2.2
regular expression denial of service
crafted payloads
projectreferencefilter

7.2 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A Regular Expression Denial of Service was possible via sending crafted payloads which use ProjectReferenceFilter to the preview_markdown endpoint.

7.2 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%