NetSight
low3.1

CVE-2021-39914

A regular expression denial of service issue in GitLab versions 8.13 to 14.2.5, 14.3.0 to 14.3.3 and 14.4.0 could cause excessive usage of resources when a spe…

Impact

A regular expression denial of service issue in GitLab versions 8.13 to 14.2.5, 14.3.0 to 14.3.3 and 14.4.0 could cause excessive usage of resources when a specially crafted username was used when provisioning a new user

Affected products

VendorProductAffected versions
GitlabGitlab
from 8.13.0 before 14.2.6
from 14.3.0 before 14.3.4
Version 14.4.0

Weakness classification

References