Name of the Vulnerable Software and Affected Versions:
GitLab Enterprise Edition versions 8.3 through 12.0.2
Description:
An issue was discovered in the color codes decoder, which was vulnerable to a resource depletion attack if specific formats were used, allowing Uncontrolled Resource Consumption. The issue also involves Incorrect Access Control.
Recommendations:
For GitLab Enterprise Edition versions 8.3 through 12.0.2, consider disabling the color codes decoder as a temporary workaround until a patch is available. Restrict access to the color codes decoder module to minimize the risk of exploitation.