CVE-2024-1066
Allocation of Resources Without Limits or Throttling in GitLab
Summary
Allocation of Resources Without Limits or Throttling in GitLab
Original description
The description as published by the source.
An issue has been discovered in GitLab EE affecting all versions from 13.3.0 prior to 16.6.7, 16.7 prior to 16.7.5, and 16.8 prior to 16.8.2 which allows an attacker to do a resource exhaustion using GraphQL vulnerabilitiesCountByDay
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"13.3.3"},{"fixed":"16.6.7"},{"introduced":"16.7.0"},{"fixed":"16.7.5"},{"introduced":"16.8.0"},{"fixed":"16.8.2"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- package git://git@gitlab.com:gitlab-org/gitlab.git
- report gitlab.com