CVE-2021-39917: Medium severity gitlab vulnerability
An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. A regular expression related to quick actions features was susceptible to catastrophic backtracking that could cause a DOS attack.
Affected Software
Event History
Frequently Asked Questions
What are the risks associated with CVE-2021-39917?
CVE-2021-39917 can lead to denial of service conditions due to catastrophic backtracking in the regular expression used in quick actions features.
What versions of GitLab are affected by CVE-2021-39917?
CVE-2021-39917 affects GitLab CE/EE versions from 12.9 to before 14.3.6, 14.4 from 14.4.0 to before 14.4.4, and 14.5 from 14.5.0 to before 14.5.2.
How do I fix CVE-2021-39917?
To fix CVE-2021-39917, upgrade GitLab to version 14.3.6, 14.4.4, or 14.5.2 or later.
Is CVE-2021-39917 a critical vulnerability?
CVE-2021-39917 is considered a critical vulnerability due to its potential impact on service availability.
How can administrators mitigate the risk of CVE-2021-39917?
Administrators can mitigate the risk of CVE-2021-39917 by applying the recommended updates to their GitLab instances as soon as possible.