CVE-2019-15584
MEDIUM WAF: Medium
CVSS 6.5
Published: 2019-12-20
CWE-400 CWE-400
A denial of service exists in gitlab
WAF Coverage Analysis
Uncontrolled Resource Consumption
Medium WAF Coverage
OWASP: A05:2021 Security Misconfiguration
912xxx - DOS Protection
Uncontrolled Resource Consumption
Medium WAF Coverage
OWASP: A05:2021 Security Misconfiguration
912xxx - DOS Protection
Affected Software
| Vendor | Product | Version |
|---|---|---|
| gitlab | gitlab | up to 12.1.10 |
| gitlab | gitlab | up to 12.1.10 |
| gitlab | gitlab | 12.2.0 - 12.2.6 |
| gitlab | gitlab | 12.2.0 - 12.2.6 |
| gitlab | gitlab | 12.3.0 - 12.3.2 |
| gitlab | gitlab | 12.3.0 - 12.3.2 |
References
- hackerone.com (Exploit, Third Party Advisory)