CVE-2019-15584: Input Validation
A denial of service exists in gitlab <v12.3.2, <v12.2.6, and <v12.1.10 that would let an attacker bypass input validation in markdown fields take down the affected page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-15584?
CVE-2019-15584 is classified as a denial of service vulnerability that can significantly impact the performance of affected GitLab instances.
How do I fix CVE-2019-15584?
To fix CVE-2019-15584, you should upgrade your GitLab software to the latest version beyond 12.3.2, 12.2.6, or 12.1.10.
Which GitLab versions are affected by CVE-2019-15584?
CVE-2019-15584 affects GitLab versions prior to 12.3.2, 12.2.6, and 12.1.10 for both community and enterprise editions.
What type of attack is CVE-2019-15584 associated with?
CVE-2019-15584 is associated with a denial of service (DoS) attack that exploits input validation issues in markdown fields.
Can CVE-2019-15584 be exploited remotely?
Yes, an attacker can exploit CVE-2019-15584 remotely by bypassing input validation and causing the affected page to become unresponsive.