← Back

CVE-2024-8233

nvd nist
Published: Dec 12, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: cve@gitlab.com (Secondary)

Description

An issue has been discovered in GitLab CE/EE affecting all versions from 9.4 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. An attacker could cause a denial of service with requests for diff files on a commit or merge request.

Affected (6)

Products: Gitlab: Gitlab
Gitlab
1 product
Gitlab
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Gitlab
Gitlab
17.5.0 ≤ version < 17.5.4
Gitlab
17.6.0 ≤ version < 17.6.2
Gitlab
9.4.0 ≤ version < 17.4.6
Gitlab
17.5.0 ≤ version < 17.5.4
Gitlab
17.6.0 ≤ version < 17.6.2
Gitlab
9.4.0 ≤ version < 17.4.6

Related CWEs

CWE-407
Inefficient Algorithmic Complexity
An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached.

References (2)

Source: cve@gitlab.com
ExploitIssue TrackingVendor Advisory
Source: cve@gitlab.com
Permissions Required

Timeline

No history available yet.