CVE-2023-3210: Inefficient Regular Expression Complexity in GitLab
An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. An authenticated user could trigger a denial of service when importing or cloning malicious content.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-3210.
What versions of GitLab are affected by this vulnerability?
All versions starting from 15.11 before 16.1.5, all versions starting from 16.2 before 16.2.5, and all versions starting from 16.3 before 16.3.1 are affected.
What is the severity of CVE-2023-3210?
The severity of CVE-2023-3210 is medium with a CVSS score of 6.5.
How can an authenticated user trigger the denial of service?
An authenticated user can trigger the denial of service by importing or cloning malicious content.
Are there any references available for this vulnerability?
Yes, you can find references for this vulnerability at the following links: - [GitLab Issue](https://gitlab.com/gitlab-org/gitlab/-/issues/415074) - [HackerOne Report](https://hackerone.com/reports/2011474)