CVE-2019-6785

MEDIUM

GitLab 7.4.0-11.5.7, 11.6.0-11.6.5, 11.7.0 - Denial of Service via Markdown Field Input

Title source: llm
STIX 2.1

Description

An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Denial of Service. Inputting an overly long string into a Markdown field could cause a denial of service.

References (2)

Core 2
Core References
Exploit, Issue Tracking, Third Party Advisory x_refsource_confirm
https://gitlab.com/gitlab-org/gitlab-ce/issues/52212

Scores

CVSS v3 6.5
EPSS 0.0028
EPSS Percentile 51.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published
Products (1)
gitlab/gitlab 7.4.0 - 11.5.8 (2 CPE variants)
Published Sep 09, 2019
Tracked Since Feb 18, 2026