CVE-2024-8041
Description
A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions prior to 17.1.6, 17.2 prior to 17.2.4, and 17.3 prior to 17.3.1. A denial of service could occur upon importing a maliciously crafted repository using the GitHub importer.
Summary dbcve.org
A denial of service vulnerability exists in GitLab CE/EE where importing a maliciously crafted repository through the GitHub importer can cause the service to become unavailable. The vulnerability affects all versions prior to 17.1.6, versions prior to 17.2.4 in the 17.2 branch, and versions prior to 17.3.1 in the 17.3 branch.
Mitigation
Upgrade GitLab to version 17.1.6, 17.2.4, 17.3.1 or later to remediate this vulnerability. Consider restricting or validating GitHub repository imports until the patch is applied.