CVE-2021-39907 - log back

CVE-2021-39907 edited at 28 Oct 2021 15:13:13
Severity
- Unknown
+ Medium
Remote
- Unknown
+ Remote
Type
- Unknown
+ Denial of service
Description
+ A potential denial of service vulnerability was discovered in GitLab CE/EE starting with version 13.7. The stripping of EXIF data from certain images resulted in high CPU usage.
References
+ https://about.gitlab.com/releases/2021/10/28/security-release-gitlab-14-4-1-released/
CVE-2021-39907 created at 28 Oct 2021 15:08:24