CVE-2024-2800 — Uncontrolled Resource Consumption in GitLab

CVE-2024-2800

Uncontrolled Resource Consumption in GitLab PUBLISHED

Description (CNA)

ReDoS flaw in RefMatcher when matching branch names using wildcards in GitLab EE/CE affecting all versions from 11.3 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2 allows denial of service via Regex backtracking.

Affected (CNA)

Vendor / product	Versions
GitLab / GitLab	affected 11.3 before 17.0.6; affected 17.1 before 17.1.4; affected 17.2 before 17.2.2

CWE

CWE-1333

References

https://gitlab.com/gitlab-org/gitlab/-/issues/451293
https://hackerone.com/reports/2416332

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.