1 result · Feed
-
Low —
eventing-gitlab vulnerable to denial of service, caused by improper enforcement of the timeout on individual read operations
### Impact The eventing-gitlab cluster-local server doesn't set `ReadHeaderTimeout` which could lead do a DDoS attack, where a large group of users send requests to the server causing the server to hang for long enough to deny it from being available to…