CVE-2024-6324

Published: Jan 9, 2025Modified: Aug 5, 2025

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. It was possible to trigger a DoS by creating cyclic references between epics.

Affected (6)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	From 15.7.0 to 17.5.5
Gitlab Gitlab	From 17.6.0 to 17.6.3
Gitlab Gitlab	From 17.7.0 to 17.7.1
Gitlab Gitlab	From 15.7.0 to 17.5.5
Gitlab Gitlab	From 17.6.0 to 17.6.3
Gitlab Gitlab	From 17.7.0 to 17.7.1

Related CWEs

CWE-407

Inefficient Algorithmic Complexity

An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached.

References (3)

https://about.gitlab.com/releases/2025/01/08/patch-release-gitlab-17-7-1-released/#cyclic-reference-of-epics-leads-resource-exhaustion

Source: cve@gitlab.com

Release NotesVendor Advisory

https://gitlab.com/gitlab-org/gitlab/-/issues/468914

Source: cve@gitlab.com

ExploitIssue Tracking

https://hackerone.com/reports/2553716

Source: cve@gitlab.com

Permissions Required

Timeline

No history available yet.