GitLab · Report #1772063
ReDoS due to device-detector parsing user agents
Validstatus
mediumseverity
23upvotes
8 Oct 2024disclosed
Summary
An attacker may cause Denial of Service on a GitLab instance by exploiting a regex issue in how the application parses user agents.
More details can be found in https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4131
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.