An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. A problem with the processing logic for Discord Integrations Chat Messages can lead to a regular expression DoS attack on the server.
2024-05-14T14:35:29.810
2024-12-12T16:34:32.097
Analyzed
CVSSv3.1: 6.5 (MEDIUM)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | gitlab | gitlab | < 16.9.7 | Yes |
Application | gitlab | gitlab | < 16.9.7 | Yes |
Application | gitlab | gitlab | < 16.10.5 | Yes |
Application | gitlab | gitlab | < 16.10.5 | Yes |
Application | gitlab | gitlab | < 16.11.2 | Yes |
Application | gitlab | gitlab | < 16.11.2 | Yes |