CVE-2024-2829CWE-1333

Inefficient Regular Expression Complexity in GitLab

High · published April 25, 2024

CVSS v3.1

7.5

EPSS

26%

Percentile

98.0

In the wild

Unconfirmed

What it is

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.5 before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1. A crafted wildcard filter in FileFinder may lead to a denial of service.

The record

Technical detail

CVSS v3.1: 7.5 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0: Not supplied
EPSS: 0.25965 · 98.0th percentile
Weakness: CWE-1333 · Inefficient Regular Expression Complexity
Published: 2024-04-25T11:02Z

EPSS history

Timeline

25 APR 11:02Z
Inefficient Regular Expression Complexity in GitLab
cvelistv5