PT-2024-5508 · Gitlab · Gitlab Ce/Ee+1
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
GitLab CE/EE versions 1.0 through 17.0.6
GitLab CE/EE versions 17.1 through 17.1.4
GitLab CE/EE versions 17.2 through 17.2.2
Description
A Denial of Service (DoS) condition has been discovered in GitLab CE/EE, allowing an attacker to cause resource exhaustion via the
banzai pipeline. This issue affects multiple versions of the software and can be exploited by a remote attacker to cause a service disruption.Recommendations
For versions 1.0 through 17.0.6, update to a version later than 17.0.6.
For versions 17.1 through 17.1.4, update to a version later than 17.1.4.
For versions 17.2 through 17.2.2, update to a version later than 17.2.2.
As a temporary workaround, consider restricting access to the
banzai pipeline to minimize the risk of exploitation.Exploit
Fix
DoS
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Gitlab
Gitlab Ce/Ee