BIT-gitlab-2024-12379

vendorUSosv

Allocation of Resources Without Limits or Throttling in GitLab

view advisory published 2025-02-17Licence: per source

A denial of service vulnerability in GitLab CE/EE affecting all versions from 14.1 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to impact the availability of GitLab via unbounded symbol creation via the scopes parameter in a Personal Access Token.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-12379US	—	0.51% (43rd)	—	2025-02-12
A denial of service vulnerability in GitLab CE/EE affecting all versions from 14.1 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to impact the…

references

External citations — patches, advisories, analysis.

https://gitlab.com/gitlab-org/gitlab/-/issues/508559FIX
https://hackerone.com/reports/2871791WEB
https://nvd.nist.gov/vuln/detail/CVE-2024-12379WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan