CVE-2023-2232

MEDIUM

GitLab 15.10-16.1 - Denial of Service via Jira Prefix Regular Expression

Title source: llm

An issue has been discovered in GitLab affecting all versions starting from 15.10 before 16.1, leading to a ReDoS vulnerability in the Jira prefix

Core 3

Core References

Vendor Advisory

Exploit, Issue Tracking

Permissions Required

CVSS v3 6.5

EPSS 0.0131

EPSS Percentile 66.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

CWE

CWE-1333

Status published

Products (1)

gitlab/gitlab 15.10 - 16.1

Published Jun 28, 2023

Tracked Since Feb 18, 2026