CVE-2023-3917: Improper Validation of Specified Type of Input in GitLab
Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows attacker to cause pipelines to fail.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2023-3917?
CVE-2023-3917 is a vulnerability in Gitlab EE and CE prior to version 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 that allows attackers to cause denial of service (DoS) in pipelines, causing them to fail.
How does CVE-2023-3917 affect Gitlab?
CVE-2023-3917 affects all versions of Gitlab EE and CE prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1.
What is the severity of CVE-2023-3917?
CVE-2023-3917 has a severity rating of 7.5 (high).
How can I fix CVE-2023-3917?
To fix CVE-2023-3917, it is recommended to upgrade to Gitlab version 16.2.8, 16.3.5, or 16.4.1 or later.
Where can I find more information about CVE-2023-3917?
You can find more information about CVE-2023-3917 on the Gitlab issue page (https://gitlab.com/gitlab-org/gitlab/-/issues/417896) and the HackerOne report (https://hackerone.com/reports/2055158).