BIT-gitlab-2023-1733

vendorUSosv

view advisory published 2024-03-06Licence: per source

A denial of service condition exists in the Prometheus server bundled with GitLab affecting all versions from 11.10 to 15.8.5, 15.9 to 15.9.4 and 15.10 to 15.10.1.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-1733US	high7.5	1.24% (69th)	—	2023-04-05
A denial of service condition exists in the Prometheus server bundled with GitLab affecting all versions from 11.10 to 15.8.5, 15.9 to 15.9.4 and 15.10 to 15.10.1.

references

External citations — patches, advisories, analysis.

https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1733.jsonADVISORY
https://gitlab.com/gitlab-org/gitlab/-/issues/392665WEB
https://hackerone.com/reports/1723124WEB
https://nvd.nist.gov/vuln/detail/CVE-2023-1733WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan