Lucene search

K
zdiQuintin Crist of Trend Micro Security ResearchZDI-24-358
HistoryApr 01, 2024 - 12:00 a.m.

GitLab Label Description Uncontrolled Resource Consumption Denial-of-Service Vulnerability

2024-04-0100:00:00
Quintin Crist of Trend Micro Security Research
www.zerodayinitiative.com
5
gitlab
uncontrolled resource consumption
dos
vulnerability
authentication required
label descriptions
crafted request
server resources

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.0%

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of GitLab. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of label descriptions. By sending a crafted request, an attacker can consume all available resources on the server. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.0%