CVE-2023-3246

MEDIUM

GitLab < 16.3.6, 16.4-16.4.2, 16.5-16.5.1 - Denial of Service via Sidekiq Job Processor Blocking

Title source: llm
STIX 2.1

Description

An issue has been discovered in GitLab EE/CE affecting all versions starting before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1 which allows an attackers to block Sidekiq job processor.

References (2)

Core 2
Core References
Issue Tracking, Vendor Advisory issue-tracking
https://gitlab.com/gitlab-org/gitlab/-/issues/415371
Permissions Required technical-description exploit permissions-required
https://hackerone.com/reports/2014157

Scores

CVSS v3 4.3
EPSS 0.0005
EPSS Percentile 15.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-770
Status published
Products (2)
gitlab/gitlab 16.5.0 (2 CPE variants)
gitlab/gitlab < 16.3.6 (2 CPE variants)
Published Nov 06, 2023
Tracked Since Feb 18, 2026