CVE-2024-4539CWE-770

Allocation of Resources Without Limits or Throttling in GitLab

Medium · published May 9, 2024

CVSS v3.1
4.3
EPSS
1%
Percentile
55.1
In the wild
Unconfirmed
What it is

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2 where abusing the API to filter branch and tags could lead to Denial of Service.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00768 · 55.1th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2024-05-09T01:38Z
EPSS history
Timeline
  • 09 MAY 01:38Z
    Allocation of Resources Without Limits or Throttling in GitLab
    cvelistv5