An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Denial of Service. Inputting an overly long string into a Markdown field could cause a denial of service.

Threat-Mapped Scoring

Score: 1.5

Priority: P4 - Informational (Low)

• S10 – Denial of Service

EPSS

Score: 0.00223
Percentile: 0.44964

CVSS Scoring

Affected Products

• cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
• cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
• cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
• cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
• cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
• cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

← Back to Home