PT-2023-30038 · Gitlab · Gitlab
CVE-2023-4647
·
Publicado
2023-09-01
·
Atualizado
2024-10-08
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
GitLab versions 15.2 through 16.1.4
GitLab versions 16.2 through 16.2.4
GitLab versions 16.3 through 16.3.0
Description
An issue has been discovered in GitLab where the projects API pagination can be skipped, potentially leading to Denial of Service (DoS) on certain instances.
Recommendations
For GitLab versions 15.2 through 16.1.4, update to version 16.1.5 or later.
For GitLab versions 16.2 through 16.2.4, update to version 16.2.5 or later.
For GitLab versions 16.3 through 16.3.0, update to version 16.3.1 or later.
Exploit
Correção
DoS
Allocation of Resources Without Limits
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Gitlab