CVE-2024-12379

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 14.1 through 17.6.4 GitLab CE/EE versions 17.7 through 17.7.3 GitLab CE/EE versions 17.8 through 17.8.1

Description A denial of service issue affects the availability of GitLab via unbounded symbol creation. This is achieved through the scopes parameter in a Personal Access Token.

Recommendations For versions 14.1 through 17.6.4, update to version 17.6.5 or later. For versions 17.7 through 17.7.3, update to version 17.7.4 or later. For versions 17.8 through 17.8.1, update to version 17.8.2 or later. As a temporary workaround, consider restricting the use of the scopes parameter in Personal Access Tokens until a patch is available.