Unrated

Improper Validation of Specified Type of Input in GitLab

CVE-2023-3917 First seen on SecPulse Sep 29, 2023

Fix status by distribution

Fixed packages published by each distribution for this CVE

Ubuntu UBUNTU-CVE-2023-3917 gitlab

Original description The description as published by the source.

Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows attacker to cause pipelines to fail.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
package git://git@gitlab.com:gitlab-org/gitlab.git
report gitlab.com
report hackerone.com

Key facts

Severity: Unrated
Published: Sep 29, 2023
First seen on SecPulse: Sep 29, 2023
CWE: CWE-1287

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:58