CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. It affects GitLab. Its EPSS score suggests a 44.5% probability of exploitation in the next 30 days. It may lead to a denial-of-service condition.
CVE
CVE-2023-3364
Severity
HIGH
CVSS
7.5
EPSS
44.49%
GitLab
Original NVD Description
An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.14 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A Regular Expression Denial of Service was possible via sending crafted payloads which use AutolinkFilter to the preview_markdown endpoint.
Related CVEs
Other vulnerabilities affecting the same vendor(s)