An issue has been discovered in GitLab CE/EE affecting all versions before 16.10.6, version 16.11 before 16.11.3, and 17.0 before 17.0.1. A runner registered with a crafted description has the potential to disrupt the loading of targeted GitLab web resources.
Metrics
Affected Vendors & Products
References
History
Mon, 16 Dec 2024 15:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
CPEs | cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:* cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* cpe:2.3:a:gitlab:gitlab:17.0.0:*:*:*:community:*:*:* cpe:2.3:a:gitlab:gitlab:17.0.0:*:*:*:enterprise:*:*:* |
Fri, 04 Oct 2024 08:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Thu, 03 Oct 2024 07:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Weaknesses | CWE-400 |
Thu, 03 Oct 2024 06:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Title | Uncontrolled Resource Consumption in GitLab | Allocation of Resources Without Limits or Throttling in GitLab |
Weaknesses | CWE-770 |
Thu, 29 Aug 2024 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Gitlab
Gitlab gitlab |
|
CPEs | cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:* | |
Vendors & Products |
Gitlab
Gitlab gitlab |
MITRE
Status: PUBLISHED
Assigner: GitLab
Published: 2024-05-23T07:02:35.610Z
Updated: 2024-10-03T06:23:19.176Z
Reserved: 2024-03-25T20:30:39.244Z
Link: CVE-2024-2874
Vulnrichment
Updated: 2024-08-01T19:25:42.188Z
NVD
Status : Analyzed
Published: 2024-05-23T07:15:08.463
Modified: 2024-12-16T15:16:54.830
Link: CVE-2024-2874
Redhat
No data.