ZDI-24-358: GitLab Label Description Uncontrolled Resource Consumption Denial-of-Service Vulnerability
Published Apr 1, 2024
·Updated
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of GitLab. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.3. The following CVEs are assigned: CVE-2024-2818.
Affected Software
1 affected component
GitLab GitLab
Event History
Apr 1, 2024
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-24-358?
The severity of ZDI-24-358 is rated at 4.3 according to the CVSS.
2
How do I fix ZDI-24-358?
To fix ZDI-24-358, ensure that you update to the latest version of GitLab that addresses this vulnerability.
3
What types of attacks can exploit ZDI-24-358?
ZDI-24-358 can be exploited by remote attackers to create a denial-of-service condition on affected GitLab installations.
4
Is authentication required to exploit ZDI-24-358?
Yes, authentication is required to exploit the ZDI-24-358 vulnerability.
5
Which software is affected by ZDI-24-358?
GitLab installations are affected by the ZDI-24-358 vulnerability.