BIT-gitlab-2023-3917

vendorUSosv

Improper Validation of Specified Type of Input in GitLab

view advisory published 2024-03-06Licence: per source

Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows attacker to cause pipelines to fail.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-3917US	high7.5	0.93% (60th)	—	2023-09-29
Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows attacker to cause pipelines to fail…

references

External citations — patches, advisories, analysis.

https://gitlab.com/gitlab-org/gitlab/-/issues/417896WEB
https://hackerone.com/reports/2055158WEB
https://nvd.nist.gov/vuln/detail/CVE-2023-3917WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan