CVE-2024-1493: Uncontrolled Resource Consumption in GitLab
An issue was discovered in GitLab CE/EE affecting all versions starting from 9.2 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, with the processing logic for generating link in dependency files can lead to a regular expression DoS attack on the server
Affected Software
Remediation
Information
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-1493?
CVE-2024-1493 is classified as a denial-of-service vulnerability affecting GitLab.
How do I fix CVE-2024-1493?
To fix CVE-2024-1493, upgrade GitLab to versions 16.11.5 or 17.0.3 and higher.
Who is affected by CVE-2024-1493?
CVE-2024-1493 affects all GitLab CE/EE versions from 9.2 to 16.11.5 and specific 17.x versions.
What types of attacks are possible with CVE-2024-1493?
CVE-2024-1493 can lead to a regular expression denial-of-service (ReDoS) attack due to vulnerable link processing logic.
When was CVE-2024-1493 discovered?
CVE-2024-1493 was reported in 2024 as an issue impacting multiple versions of GitLab.