CVE-2024-5423: Uncontrolled Resource Consumption in GitLab
Multiple Denial of Service (DoS) conditions has been discovered in GitLab CE/EE affecting all versions starting from 1.0 prior to 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 prior to 17.2.2 which allowed an attacker to cause resource exhaustion via banzai pipeline.
Affected Software
Remediation
Information
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-5423?
CVE-2024-5423 has a high severity level due to its potential to cause denial of service through resource exhaustion.
How do I fix CVE-2024-5423?
To fix CVE-2024-5423, you should upgrade to GitLab version 17.0.6 or later, 17.1.4 or later, or 17.2.2 or later.
Which versions of GitLab are affected by CVE-2024-5423?
CVE-2024-5423 affects all GitLab versions starting from 1.0 up to 17.0.6, starting from 17.1 up to 17.1.4, and starting from 17.2 up to 17.2.2.
What kind of vulnerability is CVE-2024-5423?
CVE-2024-5423 is classified as a Denial of Service (DoS) vulnerability allowing attackers to exhaust resources.
Can CVE-2024-5423 be exploited remotely?
Yes, CVE-2024-5423 can be exploited remotely by attackers to trigger denial of service conditions.