CVE Vulnerabilities

CVE-2024-1816

Published: Jun 27, 2024 | Modified: Jun 28, 2024
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

An issue was discovered in GitLab CE/EE affecting all versions starting from 12.0 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows for an attacker to cause a denial of service using a crafted OpenAPI file.

Affected Software

Name Vendor Start Version End Version
Gitlab Gitlab 12.0 (including) 16.11.5 (excluding)
Gitlab Gitlab 17.0.0 (including) 17.0.3 (excluding)
Gitlab Gitlab 17.1.0 (including) 17.1.0 (including)
Gitlab Ubuntu esm-apps/xenial *

References