CVE-2022-3411

CVE-2022-3411

A lack of length validation in GitLab CE/EE affecting all versions from 12.4 before 15.6.7, 15.7 before 15.7.6, and 15.8 before 15.8.1 allows an authenticated attacker to create a large Issue description via GraphQL which, when repeatedly requested, saturates CPU usage.

Source: CVE-2022-3411

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다