GitLab Experiences Denial of Service Vulnerability

CVE-2024-8233

Summary

A denial of service vulnerability has been identified in GitLab Community Edition and Enterprise Edition, impacting all versions from 9.4 up to but not including 17.4.6, 17.5 up to but not including 17.5.4, and 17.6 up to but not including 17.6.2. An attacker may exploit this vulnerability by sending specially crafted requests for diff files associated with a commit or merge request, leading to potential service interruptions and unavailability for the affected GitLab instances. Mitigation strategies should be implemented promptly to reduce the risk of exploitation.

References