CVE-2023-6386CWE-770

Allocation of Resources Without Limits or Throttling in GitLab

Medium · published February 5, 2025

CVSS v3.1
6.5
EPSS
1%
Percentile
44.2
In the wild
Unconfirmed
What it is

A denial of service vulnerability was identified in GitLab CE/EE, affecting all versions from 15.11 prior to 16.6.7, 16.7 prior to 16.7.5 and 16.8 prior to 16.8.2 which allows an attacker to spike the GitLab instance resource usage resulting in service degradation.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00533 · 44.2th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2025-02-05T09:31Z
EPSS history
Timeline
  • 05 FEB 09:31Z
    Allocation of Resources Without Limits or Throttling in GitLab
    cvelistv5