CVE-2023-0121
Description
A denial of service issue was discovered in GitLab CE/EE affecting all versions starting from 13.2.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2 which allows an attacker to cause high resource consumption using malicious test report artifacts.
Summary dbcve.org
A denial of service vulnerability in GitLab CE/EE allows attackers to cause high resource consumption by uploading malicious test report artifacts. This affects all versions from 13.2.4 through 16.0.1, enabling attackers to trigger excessive server resource usage via crafted test reports.
Mitigation
Upgrade GitLab to version 15.10.8, 15.11.7, or 16.0.2 or later. Consider implementing rate limiting and file size restrictions on test report artifact uploads as a defensive measure.