MEDIUM
CVE-2024-4557
CVSS
6.5
Description
Multiple Denial of Service (DoS) conditions has been discovered in GitLab CE/EE affecting all versions starting from 1.0 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1 which allowed an attacker to cause resource exhaustion via banzai pipeline.
Summary dbcve.org
This is a Denial of Service vulnerability in GitLab CE/EE where an attacker can cause resource exhaustion through the banzai pipeline component. The vulnerability affects multiple version branches and allows attackers to potentially overwhelm server resources.
Mitigation
Upgrade GitLab to version 16.11.5, 17.0.3, 17.1.1 or later to patch the resource exhaustion vulnerability in the banzai pipeline.
Weakness (CWE)
CWE-400
Uncontrolled Resource Consumption
EPSS Score
0.53%
Probability of exploitation in next 30 days
43.9th percentile
References
Base CVE data derived from NVD (public domain). Enrichment by
dbcve.org
(CC-BY-4.0). Fetched via API.