CVE-2023-2198

Summary

CVE-2023-2198 is a vulnerability affecting GitLab CE/EE versions 8.7 before 15.10.8, 15.11 before 15.11.7, and 16.0 before 16.0.2. This issue enables a Regular Expression Denial of Service (ReDoS) attack, allowing an attacker to send crafted payloads to the preview_markdown endpoint and potentially cause the server to crash or consume excessive resources, leading to a denial of service condition. Successful exploitation could result in significant disruption to the targeted GitLab instance. Users are advised to upgrade to the patched versions as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.