Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2021-39907

A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 13.7. The stripping of EXIF data from certain images resulted in high CPU usage.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitLab

Description

A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 13.7. The stripping of EXIF data from certain images resulted in high CPU usage.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GitLab GitLab

  • >=14.4, <14.4.1affected
  • >=14.3, <14.3.4affected
  • >=13.7, <14.2.6affected

References