Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-3114

An issue was discovered in GitLab CE/EE affecting all versions starting from 11.10 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2, with the processing logic for parsing invalid commits can lead to a regular expression DoS attack on the server.

Published

2024-08-08T11:15:12.733

Last Modified

2024-08-30T14:15:15.937

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-1333
  • Type: Primary
    CWE-1333
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application gitlab gitlab < 17.0.6 Yes
Application gitlab gitlab < 17.0.6 Yes
Application gitlab gitlab < 17.1.4 Yes
Application gitlab gitlab < 17.1.4 Yes
Application gitlab gitlab < 17.2.2 Yes
Application gitlab gitlab < 17.2.2 Yes
References