HTTP: GitLab Community and Enterprise Edition Markdown Render Denial of Service
This signature detects attempts to exploit a known cross-site scripting vulnerability against GitLab Community and Enterprise Editions. It is due to insufficient validation of user-supplied input. Attackers can steal cookie-based authentication credentials and launch other attacks.
Extended Description
An issue has been discovered in GitLab CE/EE affecting all versions before 16.9.7, all versions starting from 16.10 before 16.10.5, all versions starting from 16.11 before 16.11.2. It was possible for an attacker to cause a denial of service using maliciously crafted markdown content.
Affected Products
Gitlab gitlab
Short Name
HTTP:XSS:GITLAB-CE-EE-MDOS
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2024-2651 Community Denial Edition Enterprise GitLab Markdown Render Service and of
Release Date
08/30/2024
Supported Platforms
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vsrx-19.2
srx-19.3
Sigpack Version
3765
False Positive
Unknown
Vendors
Gitlab