VULNERABILITY INTELLIGENCE

CVE-2024-8233

CVSS score7.5 HIGH

EPSS probability0.76%

CISA KEVNot currently listed

Published2024-12-12

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

An issue has been discovered in GitLab CE/EE affecting all versions from 9.4 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. An attacker could cause a denial of service with requests for diff files on a commit or merge request.

Weakness classification

cve@gitlab.com: CWE-407

Primary references

cve@gitlab.com — Exploit, Issue Tracking, Vendor Advisory
cve@gitlab.com — Permissions Required