CVE-2024-4557

CVSS V2 None CVSS V3 None

Description

Multiple Denial of Service (DoS) conditions has been discovered in GitLab CE/EE affecting all versions starting from 1.0 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1 which allowed an attacker to cause resource exhaustion via banzai pipeline.

Overview

CVE ID
CVE-2024-4557

Assigner
GitLab

Vulnerability Status
PUBLISHED

Published Version
2024-06-26T23:31:10.425Z

Last Modified Date
2024-06-26T23:31:10.425Z

Weakness Enumerations

CWE	URL
CWE-400	http://cwe.mitre.org/data/definitions/400.html

References

Reference URL	Reference Tags
https://gitlab.com/gitlab-org/gitlab/-/issues/460517	issue-tracking permissions-required
https://hackerone.com/reports/2485172	technical-description exploit permissions-required

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-4557
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4557

History

Created	Old Value	New Value	Data Type	Notes
2024-06-27 13:03:38				Added to TrackCVE