Lucene search

Ubuntu.comUB:CVE-2018-15472

HistoryApr 15, 2023 - 12:00 a.m.

CVE-2018-15472

2023-04-1500:00:00

ubuntu.com

cve-2018-15472

gitlab

diff formatter

rouge

sidekiq jobs

timeout

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

47.3%

JSON

An issue was discovered in GitLab Community and Enterprise Edition before
11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. The diff formatter
using rouge can block for a long time in Sidekiq jobs without any timeout.

Notes

Author	Note
msalvatore	Affects GitLab CE/EE 7.6 and later.

OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchgitlab< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	16.04	noarch	gitlab	< any	UNKNOWN

References

about.gitlab.com/2018/10/01/security-release-gitlab-11-dot-3-dot-1-released/

launchpad.net/bugs/cve/CVE-2018-15472

nvd.nist.gov/vuln/detail/CVE-2018-15472

security-tracker.debian.org/tracker/CVE-2018-15472

www.cve.org/CVERecord?id=CVE-2018-15472

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

47.3%

JSON

Related for UB:CVE-2018-15472