CVE-2024-1066
Allocation of Resources Without Limits or Throttling in GitLab
Résumé
Allocation of Resources Without Limits or Throttling in GitLab
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue has been discovered in GitLab EE affecting all versions from 13.3.0 prior to 16.6.7, 16.7 prior to 16.7.5, and 16.8 prior to 16.8.2 which allows an attacker to do a resource exhaustion using GraphQL vulnerabilitiesCountByDay
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"13.3.3"},{"fixed":"16.6.7"},{"introduced":"16.7.0"},{"fixed":"16.7.5"},{"introduced":"16.8.0"},{"fixed":"16.8.2"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- package git://git@gitlab.com:gitlab-org/gitlab.git
- report gitlab.com