CVE-2024-7610
Uncontrolled Resource Consumption in GitLab
概要
Uncontrolled Resource Consumption in GitLab
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions starting with 15.9 before 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2. It is possible for an attacker to cause catastrophic backtracking while parsing results from Elasticsearch.
影響パッケージ
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"15.9.0"},{"fixed":"17.0.6"},{"introduced":"17.1.0"},{"fixed":"17.1.4"},{"introduced":"17.2.0"},{"fixed":"17.2.2"}]}]
参照URL
- web gitlab.com
- web nvd.nist.gov