Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-6688
HistoryMay 14, 2024 - 12:00 a.m.

CVE-2023-6688

2024-05-1400:00:00
ubuntu.com
ubuntu.com
8
gitlab
vulnerability
cve-2023-6688
unix
security

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

An issue has been discovered in GitLab CE/EE affecting all versions
starting from 16.11 prior to 16.11.2. A problem with the processing logic
for Google Chat Messages integration may lead to a regular expression DoS
attack on the server.

OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchgitlab< anyUNKNOWN

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%