CVE-2024-8041

A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions prior to 17.1.6, 17.2 prior to 17.2.4, and 17.3 prior to 17.3.1. A denial of service could occur upon importing a maliciously crafted repository using the GitHub importer.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - cve@gitlab.com

Published

2024-08-22

Last modified

2024-08-29

Weaknesses

CWE-400

Affected products

• Gitlab (Gitlab)

References

• https://gitlab.com/gitlab-org/gitlab/-/issues/463092
• https://hackerone.com/reports/2499070