Published: 15/05/2019 Updated: 24/08/2020

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

An issue exists in GitLab Community and Enterprise Edition prior to 11.7.10, 11.8.x prior to 11.8.6, and 11.9.x prior to 11.9.4. A regex input validation issue for the .gitlab-ci.yml refs value allows Uncontrolled Resource Consumption.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gitlab gitlab

Debian Bug report logs - #926482 gitlab: CVE-2018-5158 CVE-2019-10109 CVE-2019-10110 CVE-2019-10111 CVE-2019-10113 CVE-2019-10115 CVE-2019-10116 CVE-2019-10640 Package: src:gitlab; Maintainer for src:gitlab is Debian Ruby Extras Maintainers <pkg-ruby-extras-maintainers@listsaliothdebianorg>; Reported by: Salvatore Bonaccor ...

CWE-77 https://gitlab.com/gitlab-org/gitlab-ce/issues/49665 https://about.gitlab.com/blog/categories/releases/https://about.gitlab.com/2019/04/01/security-release-gitlab-11-dot-9-dot-4-released/https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=926482

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2019-10640

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect