| |
Vulnerability CVE-2024-2800
Published: 2024-08-08
| Description: |
ReDoS flaw in RefMatcher when matching branch names using wildcards in GitLab EE/CE affecting all versions from 11.3 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2 allows denial of service via Regex backtracking. |
References: |
https://gitlab.com/gitlab-org/gitlab/-/issues/451293
https://hackerone.com/reports/2416332
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
