CVE-2023-6386

MEDIUM

GitLab 15.11-16.6.6, 16.7-16.7.4, 16.8-16.8.1 - Denial of Service via Resource Exhaustion

Title source: llm
STIX 2.1

Description

A denial of service vulnerability was identified in GitLab CE/EE, affecting all versions from 15.11 prior to 16.6.7, 16.7 prior to 16.7.5 and 16.8 prior to 16.8.2 which allows an attacker to spike the GitLab instance resource usage resulting in service degradation.

References (2)

Core 2
Core References
Broken Link issue-tracking permissions-required
https://gitlab.com/gitlab-org/gitlab/-/issues/433147
Permissions Required technical-description exploit permissions-required
https://hackerone.com/reports/2261581

Scores

CVSS v3 6.5
EPSS 0.0283
EPSS Percentile 86.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-770
Status published
Products (1)
gitlab/gitlab 15.11.0 - 16.6.7 (2 CPE variants)
Published Feb 05, 2025
Tracked Since Feb 18, 2026