CVE-2023-5963
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Summary
CVE-2023-5963 is a denial-of-service vulnerability affecting GitLab Enterprise Edition (EE) versions 13.9 to 16.3.6, 16.4 prior to 16.4.2, and 16.5 prior to 16.5.1. The Advanced Search function in GitLab EE is susceptible to this issue, which arises from an improper handling of syntax operators. Attackers can exploit this vulnerability by chaining an excessive number of syntax operators in a search query, leading to a denial-of-service condition. The exact cause of the vulnerability lies in the way the application processes and validates complex search queries.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- GitLab
Affected Vendors
- GitLab Inc.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions