CVE-2024-7610CWE-400

Uncontrolled Resource Consumption in GitLab

Medium · published August 8, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
38.0
In the wild
Unconfirmed
What it is

A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions starting with 15.9 before 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2. It is possible for an attacker to cause catastrophic backtracking while parsing results from Elasticsearch.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00448 · 38.0th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2024-08-08T10:30Z
EPSS history
Timeline
  • 08 AUG 10:30Z
    Uncontrolled Resource Consumption in GitLab
    cvelistv5