CVE-2024-6324
Inefficient Algorithmic Complexity in GitLab
Résumé
Inefficient Algorithmic Complexity in GitLab
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue was discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. It was possible to trigger a DoS by creating cyclic references between epics.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"15.7.0"},{"fixed":"17.5.5"},{"introduced":"17.6.0"},{"fixed":"17.6.3"},{"introduced":"17.7.0"},{"fixed":"17.7.1"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- package git://git@gitlab.com:gitlab-org/gitlab.git
- report gitlab.com
- report hackerone.com
- web about.gitlab.com