https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 16:08:35 +0000 https://cve.radiocsirt.org/vuln/bit-gitlab-2023-0921 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>A lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8, 15.11 before 15.11.7, and 16.0 before 16.0.2 allows an authenticated attacker to create a large Issue description via GraphQL which, when repeatedly requested, saturates CPU usage.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>A lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8, 15.11 before 15.11.7, and 16.0 before 16.0.2 allows an authenticated attacker to create a large Issue description via GraphQL which, when repeatedly requested, saturates CPU usage.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2023-0921 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0436 certfr-2023-avi-0436 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0436 https://cve.radiocsirt.org/vuln/euvd-2026-209460 EUVD-2026-209460 https://cve.radiocsirt.org/vuln/euvd-2026-209460 https://cve.radiocsirt.org/vuln/fkie_cve-2023-0921 <p>A lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8, 15.11 before 15.11.7, and 16.0 before 16.0.2 allows an authenticated attacker to create a large Issue description via GraphQL which, when repeatedly requested, saturates CPU usage.</p> <p>A lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8, 15.11 before 15.11.7, and 16.0 before 16.0.2 allows an authenticated attacker to create a large Issue description via GraphQL which, when repeatedly requested, saturates CPU usage.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-0921 https://cve.radiocsirt.org/vuln/ghsa-p96p-59v7-xxp6 <p>A lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8, 15.11 before 15.11.7, and 16.0 before 16.0.2 allows an authenticated attacker to create a large Issue description via GraphQL which, when repeatedly requested, saturates CPU usage.</p> <p>A lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8, 15.11 before 15.11.7, and 16.0 before 16.0.2 allows an authenticated attacker to create a large Issue description via GraphQL which, when repeatedly requested, saturates CPU usage.</p> https://cve.radiocsirt.org/vuln/ghsa-p96p-59v7-xxp6 https://cve.radiocsirt.org/vuln/gsd-2023-0921 gsd-2023-0921 https://cve.radiocsirt.org/vuln/gsd-2023-0921 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-0921 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>A lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8, 15.11 before 15.11.7, and 16.0 before 16.0.2 allows an authenticated attacker to create a large Issue description via GraphQL which, when repeatedly requested, saturates CPU usage.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>A lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8, 15.11 before 15.11.7, and 16.0 before 16.0.2 allows an authenticated attacker to create a large Issue description via GraphQL which, when repeatedly requested, saturates CPU usage.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-0921 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1370 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um seine Rechte zu erweitern, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um seine Rechte zu erweitern, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1370