VDB

CVE-2023-3424

CVE-2023-3424 PUBLISHED

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.3 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1. A Regular Expression Denial of Service was possible via sending crafted payloads to the preview_markdown endpoint.

EPSS 0.58% · 69.5th percentile

Risk Scores

EPSS Score
0.58%
69.5th percentile

Affected Products

VendorProductVersions
Bitnamigitlab10.3.0, 16.0.0, 16.1.0
Bitnamigitlab10.3.0, 16.0.0, 16.1.0

Timeline

  • Jun 29, 2023 CVE Published
  • Jul 14, 2023 EPSS Score
  • Aug 18, 2023 EPSS Score
  • Oct 26, 2023 EPSS Score
  • Nov 29, 2023 EPSS Score
  • Feb 6, 2024 EPSS Score
  • Mar 12, 2024 EPSS Score
  • Apr 15, 2024 EPSS Score
  • Jun 23, 2024 EPSS Score
  • Jul 28, 2024 EPSS Score
  • Aug 31, 2024 EPSS Score
  • Nov 8, 2024 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›