CVE-2023-3205
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk48th percentile - higher than 48% of all known CVEs
Summary
An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. An authenticated user could trigger a denial of service when importing or cloning malicious content.
Risk Assessment
The organization may be exposed to denial of service attacks, which could lead to downtime and loss of access to GitLab services.
Recommendation
It is recommended to update GitLab to the latest version to mitigate this vulnerability and to monitor user activity for potential attack attempts.
Original NVD description (English source)
An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. An authenticated user could trigger a denial of service when importing or cloning malicious content.