Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-5825
HistoryNov 06, 2023 - 11:15 a.m.

Design/Logic Flaw

2023-11-0611:15:00
PRIOn knowledge base
www.prio-n.com
5
gitlab
design flaw
logic flaw
denial of service
nvd
gitlab ce/ee
memory exhaustion

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.5%

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.2 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. A low-privileged attacker can point a CI/CD Component to an incorrect path and cause the server to exhaust all available memory through an infinite loop and cause Denial of Service.

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.5%