Lucene search

K
nvd[email protected]NVD:CVE-2024-8124
HistorySep 12, 2024 - 5:15 p.m.

CVE-2024-8124

2024-09-1217:15:06
CWE-1333
web.nvd.nist.gov
3
gitlab
denial of service
cve-2024-8124

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

17.7%

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.1.7, starting from 17.2 prior to 17.2.5, starting from 17.3 prior to 17.3.2 which could cause Denial of Service via sending a specific POST request.

Affected configurations

Nvd
Node
gitlabgitlabRange16.4.017.1.7community
OR
gitlabgitlabRange16.4.017.1.7enterprise
OR
gitlabgitlabRange17.2.017.2.5community
OR
gitlabgitlabRange17.2.017.2.5enterprise
OR
gitlabgitlabRange17.3.017.3.2community
OR
gitlabgitlabRange17.3.017.3.2enterprise
VendorProductVersionCPE
gitlabgitlab*cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
gitlabgitlab*cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

17.7%