An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A Regular Expression Denial of Service was possible by using crafted payloads to search Harbor Registry.
{
"cna_assigner": "GitLab",
"cwe_ids": [
"CWE-1333"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/0xxx/CVE-2023-0632.json"
}{
"extracted_events": [
{
"introduced": "15.2"
},
{
"fixed": "16.0.8"
},
{
"introduced": "16.1"
},
{
"fixed": "16.1.3"
},
{
"introduced": "16.2"
},
{
"fixed": "16.2.2"
}
],
"source": "CPE_RANGE",
"cpe": [
"cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*"
]
}