Lucene search

GoogleOSV:BIT-GITLAB-2023-3210

HistoryMar 06, 2024 - 11:06 a.m.

BIT-gitlab-2023-3210

2024-03-0611:06:27

Google

osv.dev

gitlab

denial of service

security issue

versions 15.11 to 16.3.1

authenticated user

import

clone

software vulnerability

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.1%

JSON

An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. An authenticated user could trigger a denial of service when importing or cloning malicious content.

CPENameOperatorVersion
gitlable16.3.0
gitlabge16.3.0
gitlabge15.11.0
gitlabge16.2.0
gitlablt16.1.5
gitlablt16.2.5

Name	Operator	Version
gitlab	le	16.3.0
gitlab	ge	16.3.0
gitlab	ge	15.11.0
gitlab	ge	16.2.0
gitlab	lt	16.1.5
gitlab	lt	16.2.5

References

gitlab.com/gitlab-org/gitlab/-/issues/415074

hackerone.com/reports/2011474