Denial Of Service (DoS)

2023-07-2221:30:41

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

gitlab

denial of service

vulnerability

dynamic child pipelines

forged ci job

artifact zip file

sidekiq

ram

memory-limited

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

45.5%

JSON

gitlab is vulnerable to Denial of Service (DoS) attacks. An attacker might use a forged CI job artifact zip file in a project that employs dynamic child pipelines to cause a sidekiq task to use a large amount of RAM. This may result in a Denial of Service on GitLab instances where Sidekiq is memory-limited.