CVE-2023-5963CWE-770

Allocation of Resources Without Limits or Throttling in GitLab

Low · published November 6, 2023

CVSS v3.1
3.1
EPSS
0%
Percentile
40.5
In the wild
Unconfirmed
What it is

An issue has been discovered in GitLab EE with Advanced Search affecting all versions from 13.9 to 16.3.6, 16.4 prior to 16.4.2 and 16.5 prior to 16.5.1 that could allow a denial of service in the Advanced Search function by chaining too many syntax operators.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00480 · 40.5th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2023-11-06T12:18Z
EPSS history
Timeline
  • 06 NOV 12:18Z
    Allocation of Resources Without Limits or Throttling in GitLab
    cvelistv5