ZDI-CAN-21883: ZDI-24-358: GitLab Label Description Uncontrolled Resource Consumption Denial-of-Service Vulnerability

Published Apr 1, 2024

Updated

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of GitLab. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.3. The following CVEs are assigned: CVE-2024-2818.

Affected Software

1 affected component

GitLab GitLab

Event History

Apr 1, 2024

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

Who can exploit this issue?

An attacker must be able to authenticate to the affected GitLab installation. The available information does not identify any additional privileges or roles required.

What is the impact of successful exploitation?

A remote authenticated attacker can cause a denial-of-service condition through uncontrolled resource consumption.

How severe is this vulnerability?

ZDI assigned this issue a CVSS score of 4.3. It is tracked as CVE-2024-2818.

ZDI-CAN-21883: ZDI-24-358: GitLab Label Description Uncontrolled Resource Consumption Denial-of-Service Vulnerability

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the impact of successful exploitation?

How severe is this vulnerability?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the impact of successful exploitation?

How severe is this vulnerability?