CVE-2024-3114
MEDIUMGitLab CE/EE <17.0.6-17.2.2 - DoS
Title source: llmDescription
An issue was discovered in GitLab CE/EE affecting all versions starting from 11.10 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2, with the processing logic for parsing invalid commits can lead to a regular expression DoS attack on the server.
Scores
CVSS v3
4.3
EPSS
0.0015
EPSS Percentile
35.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Classification
CWE
CWE-1333
Status
published
Affected Products (2)
gitlab/gitlab
< 17.0.6
gitlab/gitlab
< 17.0.6
Timeline
Published
Aug 08, 2024
Tracked Since
Feb 18, 2026