1 matches found
GitLab: Uncontrolled Resource Consumption in any Markdown field using Mermaid
Summary I found a bypass for the mitigation of DoS via Mermaid CVE-2019-9220. As the mitigation for CVE-2019-9220, the input limit of 5000 characters is currently applied to a Mermaid code block, but it can be bypassed by simply splitting the longer payload to many code blocks. Steps to reproduce...
5CVSS6.9AI score0.02776EPSS
SaveExploits2
20