CVE-2019-10640 - An issue was discovered in GitLab Community and Enterprise Edition before 11.7.10, 11.8.x before 11.8.6, and 11.9.x before 11.9.4

Back Back to CVE browser

HIGH

An issue was discovered in GitLab Community and Enterprise Edition before 11.7.10, 11.8.x before 11.8.6, and 11.9.x before 11.9.4

Published May 15, 2019

7.5

HIGH

CVSS 3.0

EPSS 2.22%

Description

An issue was discovered in GitLab Community and Enterprise Edition before 11.7.10, 11.8.x before 11.8.6, and 11.9.x before 11.9.4. A regex input validation issue for the .gitlab-ci.yml refs value allows Uncontrolled Resource Consumption.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-77

References (4)

https://about.gitlab.com/2019/04/01/security-release-gitlab-11-dot-9-dot-4-released/
x_refsource_MISCRelease NotesVendor Advisory
https://about.gitlab.com/blog/categories/releases/
x_refsource_MISCRelease NotesVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-2444
Advisory
https://gitlab.com/gitlab-org/gitlab-ce/issues/49665
x_refsource_MISCExploitVendor Advisory

Link	Providers	Tags
https://about.gitlab.com/2019/04/01/security-release-gitlab-11-dot-9-dot-4-released/		x_refsource_MISCRelease NotesVendor Advisory
https://about.gitlab.com/blog/categories/releases/		x_refsource_MISCRelease NotesVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-2444		Advisory
https://gitlab.com/gitlab-org/gitlab-ce/issues/49665		x_refsource_MISCExploitVendor Advisory