An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 17.3.6, 17.4 before 17.4.3, and 17.5 before 17.5.1. A denial of service could occur via importing a malicious crafted XML manifest file.
Metrics
Affected Vendors & Products
References
History
Fri, 13 Dec 2024 15:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
CPEs | cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:* cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* cpe:2.3:a:gitlab:gitlab:17.5.0:*:*:*:community:*:*:* cpe:2.3:a:gitlab:gitlab:17.5.0:*:*:*:enterprise:*:*:* |
Thu, 24 Oct 2024 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Thu, 24 Oct 2024 09:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 17.3.6, 17.4 before 17.4.3, and 17.5 before 17.5.1. A denial of service could occur via importing a malicious crafted XML manifest file. | |
Title | Allocation of Resources Without Limits or Throttling in GitLab | |
First Time appeared |
Gitlab
Gitlab gitlab |
|
Weaknesses | CWE-770 | |
CPEs | cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:* | |
Vendors & Products |
Gitlab
Gitlab gitlab |
|
References |
| |
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: GitLab
Published: 2024-10-24T09:30:58.183Z
Updated: 2024-10-24T12:56:42.887Z
Reserved: 2024-07-16T23:30:41.788Z
Link: CVE-2024-6826
Vulnrichment
Updated: 2024-10-24T12:56:38.985Z
NVD
Status : Analyzed
Published: 2024-10-24T10:15:02.717
Modified: 2024-12-13T15:29:32.850
Link: CVE-2024-6826
Redhat
No data.