CVE-2024-9367

Published Dec 12, 2024

Last updated 3 months ago

CVSS medium 4.3

Overview

Description
An issue was discovered in GitLab CE/EE affecting all versions starting from 13.9 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2, that allows an attacker to cause uncontrolled CPU consumption, potentially leading to a Denial of Service (DoS) condition while parsing templates to generate changelogs.
Source
cve@gitlab.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
4.3
Impact score
1.4
Exploitability score
2.8
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Severity
MEDIUM

Weaknesses

cve@gitlab.com
CWE-770

Social media

Hype score
Not currently trending

  1. CVE-2024-9367 Denial of Service via CPU Consumption in GitLab CE/EE Templates A problem was found in GitLab CE/EE from version 13.9 up to 17.4.5, 17.5 up to 17.5.3, and 17.6 up to 17.6.1. An attacker can cause hi... https://t.co/tDSanKT0f6

    @VulmonFeeds

    12 Dec 2024

    52 Impressions

    1 Retweet

    1 Like

    1 Bookmark

    0 Replies

    0 Quotes

References