CVE-2024-2878

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 15.7 through 16.9.7 GitLab CE/EE versions 16.10 through 16.10.5 GitLab CE/EE versions 16.11 through 16.11.2

Description An issue has been discovered in GitLab CE/EE that could allow an attacker to cause a denial of service by crafting unusual search terms for branch names.

Recommendations For GitLab CE/EE versions 15.7 through 16.9.7, consider restricting access to branch name search functionality until a patch is available. For GitLab CE/EE versions 16.10 through 16.10.5, consider implementing input validation for branch name search terms to minimize the risk of exploitation. For GitLab CE/EE versions 16.11 through 16.11.2, consider disabling the branch name search feature temporarily until a fix is applied.