An issue has been discovered in GitLab EE with Advanced Search affecting all versions from 13.9 to 16.3.6, 16.4 prior to 16.4.2 and 16.5 prior to 16.5.1 that could allow a denial of service in the Advanced Search function by chaining too many syntax operators.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Gitlab | Gitlab | 13.9.0 (including) | 16.3.6 (including) |
Gitlab | Gitlab | 16.4.0 (including) | 16.4.2 (excluding) |
Gitlab | Gitlab | 16.5.0 (including) | 16.5.0 (including) |