Lucene search

PRIOn knowledge basePRION:CVE-2023-6736

HistoryFeb 07, 2024 - 10:15 p.m.

Denial of service

2024-02-0722:15:00

PRIOn knowledge base

www.prio-n.com

gitlab

denial of service

client-side

vulnerability

codeowners file

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

JSON

An issue has been discovered in GitLab EE affecting all versions starting from 11.3 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. It was possible for an attacker to cause a client-side denial of service using malicious crafted content in the CODEOWNERS file.

CPENameOperatorVersion
gitlabeq16.9.0
gitlabge16.8.0
gitlablt16.8.3
gitlabge11.3.0
gitlablt16.7.6

Name	Operator	Version
gitlab	eq	16.9.0
gitlab	ge	16.8.0
gitlab	lt	16.8.3
gitlab	ge	11.3.0
gitlab	lt	16.7.6

References

gitlab.com/gitlab-org/gitlab/-/issues/435036

hackerone.com/reports/2269023