CWE-1333
High likelihoodInefficient Regular Expression Complexity
The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.
426 vulnerabilities with CWE-1333
CVE-2024-24762
HIGH
python-multipart < 0.0.7 - Regular Expression Denial of Service via Content-Type Header Parsing
CVSS 7.5
CVE-2024-23732
HIGH
embedchain < 0.1.57 - Denial of Service via JSON Loader ReDoS
CVSS 7.5
CVE-2023-0881
HIGH
Canonical Linux-Bluefield < 5.4.0-1058.64 - Denial of Service via TCP Port 22 DDoS
CVSS 7.5
CVE-2023-7279
LOW
Secure Systems Engineering Connaisseur <3.3.0 - Info Disclosure
CVSS 2.6
CVE-2023-6502
MEDIUM
GitLab CE/EE <16.10.6, <16.11.3, <17.0.1 - DoS
CVSS 4.3
CVE-2023-6688
MEDIUM
GitLab 16.11.0-16.11.1 - Denial of Service via Google Chat Messages Integration
CVSS 6.5
CVE-2023-6682
MEDIUM
GitLab 16.9-16.9.6, 16.10-16.10.4, 16.11-16.11.1 - Denial of Service via Discord Integration Chat Message Processing
CVSS 6.5
CVE-2023-6678
MEDIUM
GitLab < 16.8.6, 16.9 < 16.9.4, 16.10 < 16.10.2 - Denial of Service via JUnit Test Report File
CVSS 4.3
CVE-2023-6489
MEDIUM
GitLab CE/EE <16.8.6, <16.9.4, <16.10.2 - DoS
CVSS 4.3
CVE-2023-51931
HIGH
alanclarke URLite < 3.1.0 - Denial of Service via Parsing Function
CVSS 7.5
CVE-2023-6736
MEDIUM
GitLab 11.3-16.7.5, 16.8-16.8.2, 16.9-16.9.0 - Denial of Service via Malicious CODEOWNERS File
CVSS 6.5
CVE-2023-6159
MEDIUM
GitLab 12.7-16.6.5, 16.7-16.7.3, 16.8 - Regular Expression Denial of Service via Malicious Cargo.toml Input
CVSS 6.5
CVE-2023-29487
CRITICAL
Heimdal Thor < 3.5.3 - Denial of Service via Threat To Process Correlation Module
CVSS 9.1
CVE-2023-29486
CRITICAL
Heimdal Thor <3.7.0 - Privilege Escalation
CVSS 9.8
CVE-2023-50249
HIGH
Sentry Astro 7.78.0-7.86.0 - Regular Expression Denial of Service
CVSS 7.5
CVE-2023-48631
MEDIUM
Adobe CSS-Tools < 4.3.2 - Denial of Service via CSS Parsing
CVSS 5.3
CVE-2023-46402
HIGH
git-urls 1.0.0 - Denial of Service via Inefficient Regular Expression
CVSS 7.5
CVE-2023-45806
MEDIUM
Discourse <3.1.3, <3.2.0.beta3 - Info Disclosure
CVSS 4.3
CVE-2023-3909
MEDIUM
GitLab 12.3-16.3.5, 16.4-16.4.1, 16.5 - Regular Expression Denial of Service via gitlab-ci.yml Timeout Input
CVSS 4.3
CVE-2023-39619
HIGH
node_email_check 1.0.4 - Denial of Service via ReDos in scpSyntax Component
CVSS 7.5
CVE-2023-45813
MEDIUM
Torbot < 4.0.0 - Denial of Service via Inefficient URL Validation Regex
CVSS 4.6
CVE-2023-4316
HIGH
zod 3.21.0-3.22.3 - Denial of Service via Email Validation
CVSS 7.5
CVE-2023-43646
HIGH
get-func-name < 2.0.1 - Denial of Service via Inefficient Regular Expression Complexity
CVSS 8.6
CVE-2023-3210
MEDIUM
GitLab 15.11-16.1.4, 16.2-16.2.4, 16.3 - Authenticated Denial of Service via Malicious Content Import/Clone
CVSS 6.5
CVE-2023-3205
MEDIUM
GitLab 15.11-16.1.4, 16.2-16.2.4, 16.3 - Authenticated Denial of Service via Malicious Content Import/Clone
CVSS 6.5
Details
Vulnerabilities
426
Exploit Likelihood
High