CVE-2023-3909

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.3 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. A Regular Expression Denial of Service was possible by adding a large string in timeout input in gitlab-ci.yml file.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-1333

Affected software

Vendor	Product	Versions
GitLab	GitLab	>= 12.3, < 16.3.6; >= 16.4, < 16.4.2; >= 16.5, < 16.5.1

References

https://gitlab.com/gitlab-org/gitlab/-/issues/418763Broken Link
https://hackerone.com/reports/2050269Permissions Required
https://gitlab.com/gitlab-org/gitlab/-/issues/418763Broken Link
https://hackerone.com/reports/2050269Permissions Required

Timeline

Published: Nov 6, 2023
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2023

CVE-2023-390945.4Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code via the username param CVE-2023-390965.4WebBoss.io CMS v3.7.0.1 contains a stored Cross-Site Scripting (XSS) vulnerability due to lack of input validation and output encoding.CVE-2023-390975.4WebBoss.io CMS v3.7.0.1 contains a stored cross-site scripting (XSS) vulnerability.CVE-2023-391068.8An issue in Nacos Group Nacos Spring Project v.1.1.1 and before allows a remote attacker to execute arbitrary code via the SnakeYamls Constr CVE-2023-391079.1An arbitrary file overwrite vulnerability in NoMachine Free Edition and Enterprise Client for macOS before v8.8.1 allows attackers to overwr CVE-2023-391088.8rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_b parameter in the doDiff Function of /classes/co CVE-2023-391098.8rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_a parameter in the doDiff Function of /classes/co CVE-2023-391108.8rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path parameter at /ajaxGetFileByPath.php. This vulnera CVE-2023-391126.5ECShop v4.1.16 contains an arbitrary file deletion vulnerability in the Admin Panel.CVE-2023-391135.5ngiflib commit fb271 was discovered to contain a segmentation violation via the function "main" at gif2tag.c. This vulnerability is triggere CVE-2023-391145.5ngiflib commit 84a75 was discovered to contain a segmentation violation via the function SDL_LoadAnimatedGif at ngiflibSDL.c. This vulnerabi CVE-2023-391159.8install/aiz-uploader/upload in Campcodes Online Matrimonial Website System Script 3.3 allows XSS via a crafted SVG document.