CVE-2024-2874
Allocation of Resources Without Limits or Throttling in GitLab
Résumé
Allocation of Resources Without Limits or Throttling in GitLab
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue has been discovered in GitLab CE/EE affecting all versions before 16.10.6, version 16.11 before 16.11.3, and 17.0 before 17.0.1. A runner registered with a crafted description has the potential to disrupt the loading of targeted GitLab web resources.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"16.10.6"},{"introduced":"16.11.0"},{"fixed":"16.11.3"},{"introduced":"17.0.0"},{"fixed":"17.0.1"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- package git://git@gitlab.com:gitlab-org/gitlab.git
- report gitlab.com
- report hackerone.com