CVE-2023-6502 Uncontrolled Resource Consumption in GitLab

2024-05-2311:02:31

CWE-400

GitLab

www.cve.org

cve-2023-6502

denial of service

gitlab ce/ee

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

4.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions before 16.10.6, version 16.11 before 16.11.3, and 17.0 before 17.0.1. It is possible for an attacker to cause a denial of service using a crafted wiki page.

CNA Affected

[
  {
    "vendor": "GitLab",
    "product": "GitLab",
    "repo": "git://[email protected]:gitlab-org/gitlab.git",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "16.10.6",
        "versionType": "semver"
      },
      {
        "version": "16.11",
        "status": "affected",
        "lessThan": "16.11.3",
        "versionType": "semver"
      },
      {
        "version": "17.0",
        "status": "affected",
        "lessThan": "17.0.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]