Detections
Analytics
CVE-2023-6386
medium
Description
The vulnerability exists due to insufficient input validation when processing regular expressions in CI/CD Pipeline Editor while verifying Pipeline syntax. A remote user can pass specially crafted data to the application and perform regular expression denial of service (ReDos) attack.