CVE-2024-8041 — Uncontrolled Resource Consumption in GitLab

CVE-2024-8041

Uncontrolled Resource Consumption in GitLab PUBLISHED

Description (CNA)

A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions prior to 17.1.6, 17.2 prior to 17.2.4, and 17.3 prior to 17.3.1. A denial of service could occur upon importing a maliciously crafted repository using the GitHub importer.

Affected (CNA)

Vendor / product	Versions
GitLab / GitLab	affected 0 before 17.1.6; affected 17.2 before 17.2.4; affected 17.3 before 17.3.1

CWE

CWE-400

References

https://gitlab.com/gitlab-org/gitlab/-/issues/463092
https://hackerone.com/reports/2499070

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.