CVE-2024-5469

LOW

GitLab 16.10.0-16.10.5 and 16.11.0-16.11.2 - Denial of Service via Crafted gRPC Requests

Title source: llm

Description

DoS in KAS in GitLab CE/EE affecting all versions from 16.10.0 prior to 16.10.6 and 16.11.0 prior to 16.11.3 allows an attacker to crash KAS via crafted gRPC requests.

References (1)

Core 1

Core References

Vendor Advisory issue-tracking permissions-required

https://gitlab.com/gitlab-org/gitlab/-/issues/464143

Scores

CVSS v3 3.1

EPSS 0.0043

EPSS Percentile 33.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-754

Status published

Products (1)

gitlab/gitlab 16.10.0 - 16.10.6

Published Jun 14, 2024

Tracked Since Feb 18, 2026