CVE-2022-1954
A Regular Expression Denial of Service vulnerability in GitLab CE/EE affecting all versions from 1.0.2 prior to 14.10.5, 15.0 prior to 15.0.4, and 15....
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A Regular Expression Denial of Service vulnerability in GitLab CE/EE affecting all versions from 1.0.2 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows an attacker to make a GitLab instance inaccessible via specially crafted web server response headers
影響パッケージ
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"1.0.2"},{"fixed":"14.10.5"},{"introduced":"15.0.0"},{"fixed":"15.0.4"},{"introduced":"15.1.0"},{"fixed":"15.1.1"}]}]
参照URL
- advisory gitlab.com
- advisory hackerone.com
- web gitlab.com
- web nvd.nist.gov