Advisories · Technology
Gerrit.
Every CVE that names Gerrit among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
Regular Expression Denial of Service (ReDoS) in Search Query Predicates and REST Filter Endpoints in Gerrit Code Review
- Gerrit
- Denial of service
- CVSS 8.7 High
Denial of Service via Exponential Backtracking in ANTLR Search Query Parser in Gerrit Code Review
- Gerrit
- Denial of service
- CVSS 7.6 High
Incorrect Authorization via Stale ProjectCache Eviction and Repeated .git Suffixes in Gerrit Code Review
- Gerrit
- Authentication bypass
- Broken access control
- CVSS 6.0 Medium
Improper Authorization in Gerrit allowing Code Review Bypass via "Submitted Together"
- Gerrit
- Broken access control
- CVSS 3.5 Low
Information leakage in Gerrit
- Gerrit
- Broken access control