MEDIUM
CVE-2024-4539
CVSS
6.5
Description
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2 where abusing the API to filter branch and tags could lead to Denial of Service.
Summary dbcve.org
A denial of service vulnerability exists in GitLab's API where abuse of branch and tag filtering can cause excessive resource consumption, potentially rendering the service unavailable.
Mitigation
Update GitLab to version 16.9.7, 16.10.5, 16.11.2 or later to patch this vulnerability.
Weakness (CWE)
CWE-770
Resource Allocation Without Limits
EPSS Score
0.77%
Probability of exploitation in next 30 days
54th percentile
Base CVE data derived from NVD (public domain). Enrichment by
dbcve.org
(CC-BY-4.0). Fetched via API.