Lucene search

K
osvGoogleOSV:CVE-2021-39917
HistoryDec 13, 2021 - 4:15 p.m.

CVE-2021-39917

2021-12-1316:15:08
Google
osv.dev
6
gitlab
regular expression
dos attack

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

45.7%

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. A regular expression related to quick actions features was susceptible to catastrophic backtracking that could cause a DOS attack.

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

45.7%