CVE-2023-0121CWE-770

Allocation of Resources Without Limits or Throttling in GitLab

Medium · published June 7, 2023

CVSS v3.1
6.5
EPSS
1%
Percentile
69.0
In the wild
Unconfirmed
What it is

A denial of service issue was discovered in GitLab CE/EE affecting all versions starting from 13.2.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2 which allows an attacker to cause high resource consumption using malicious test report artifacts.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01243 · 69.0th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2023-06-07T00:00Z
EPSS history
Timeline
  • 07 JUN 00:00Z
    Allocation of Resources Without Limits or Throttling in GitLab
    cvelistv5