PT-2025-6519 · Gitlab · Gitlab Ce/Ee
Sim4N6
·
Published
2025-02-12
·
Updated
2025-08-06
·
CVE-2024-12379
CVSS v2.0
8.5
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:N |
Name of the Vulnerable Software and Affected Versions
GitLab CE/EE versions 14.1 through 17.6.4
GitLab CE/EE versions 17.7 through 17.7.3
GitLab CE/EE versions 17.8 through 17.8.1
Description
A denial of service issue affects the availability of GitLab via unbounded symbol creation. This is achieved through the
scopes parameter in a Personal Access Token.Recommendations
For versions 14.1 through 17.6.4, update to version 17.6.5 or later.
For versions 17.7 through 17.7.3, update to version 17.7.4 or later.
For versions 17.8 through 17.8.1, update to version 17.8.2 or later.
As a temporary workaround, consider restricting the use of the
scopes parameter in Personal Access Tokens until a patch is available.Exploit
Fix
DoS
Allocation of Resources Without Limits
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Gitlab Ce/Ee