GitLab 13.7 < 13.7.2 (CVE-2021-22166)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request with a malformed method CVE-2021-22166 Note that Nessus has not tested for this issue but has instead...

CVE-2021-22166

An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request with a malformed method...

CVE-2021-22166

An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request with a malformed method...

CVE-2021-22166

CVE-2021-22166 affects GitLab 13.7+ where an attacker could trigger a Prometheus denial of service by sending an HTTP request with a malformed method. The linked advisories describe the issue as mitigated in GitLab version 13.7.2 (and related fixes) and outline remediation guidance. The initial a...

[ASA-202101-10] gitlab: multiple issues

Arch Linux Security Advisory ASA-202101-10 ========================================== Severity: High Date : 2021-01-12 CVE-ID : CVE-2020-26414 CVE-2021-22166 CVE-2021-22167 CVE-2021-22168 CVE-2021-22171 Package : gitlab Type : multiple issues Remote : Yes Link :...