Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-2651
HistoryMay 14, 2024 - 12:00 a.m.

CVE-2024-2651

2024-05-1400:00:00
ubuntu.com
ubuntu.com
5
gitlab
security
issue
cve-2024-2651
unix

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

An issue has been discovered in GitLab CE/EE affecting all versions before
16.9.7, all versions starting from 16.10 before 16.10.5, all versions
starting from 16.11 before 16.11.2. It was possible for an attacker to
cause a denial of service using maliciously crafted markdown content.

OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchgitlab< anyUNKNOWN

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%