← Back

CVE-2024-12379

nvd nist
Published: Feb 12, 2025Modified: Aug 6, 2025

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: cve@gitlab.com (Secondary)

Description

A denial of service vulnerability in GitLab CE/EE affecting all versions from 14.1 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to impact the availability of GitLab via unbounded symbol creation via the scopes parameter in a Personal Access Token.

Affected (6)

Products: Gitlab: Gitlab
Gitlab
1 product
Gitlab
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Gitlab
Gitlab
From 14.1.0 to 17.6.5
Gitlab
From 17.7.0 to 17.7.4
Gitlab
From 17.8.0 to 17.8.2
Gitlab
From 14.1.0 to 17.6.5
Gitlab
From 17.7.0 to 17.7.4
Gitlab
From 17.8.0 to 17.8.2

Related CWEs

CWE-770
Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (2)

Source: cve@gitlab.com
ExploitIssue TrackingPatch
Source: cve@gitlab.com
Permissions Required

Timeline

No history available yet.