Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2019/08/09 1:54 p.m.46 views

GitLab: Uncontrolled Resource Consumption in any Markdown field using Mermaid

Summary I found a bypass for the mitigation of DoS via Mermaid CVE-2019-9220. As the mitigation for CVE-2019-9220, the input limit of 5000 characters is currently applied to a Mermaid code block, but it can be bypassed by simply splitting the longer payload to many code blocks. Steps to reproduce...

5CVSS6.9AI score0.02776EPSS
SaveExploits2
Rows per page
Query Builder