GitLab 10.5 < 16.4.3 / 16.5 < 16.5.3 / 16.6 < 16.6.1 (CVE-2023-4912)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab EE affecting all versions starting from 10.5 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was...

CVE-2023-4912

CVE-2023-4912 affects GitLab EE: vulnerable on all versions 10.5–16.4.3, 16.5–16.5.3, and 16.6–16.6.1 due to client-side DoS from malicious mermaid diagram input. Connected sources indicate fixes in 16.4.3, 16.5.3, and 16.6.1 (GitLab EE/CE). Remediation: upgrade to the patched releases (e.g., 16....

CVE-2023-4912 Allocation of Resources Without Limits or Throttling in GitLab

An issue has been discovered in GitLab EE affecting all versions starting from 10.5 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for an attacker to cause a client-side denial of service using malicious crafted mermaid...