CVE Catalog

CVE-2023-4011

MediumCVSS 4.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.66%

47th percentile - higher than 47% of all known CVEs

Summary

An issue has been discovered in GitLab EE affecting all versions from 15.11 prior to 16.2.2 which allows an attacker to spike the resource consumption resulting in DoS.

Risk Assessment

An attacker can exploit this vulnerability to disrupt service availability, potentially leading to downtime and loss of user trust.

Recommendation

It is recommended to upgrade GitLab EE to version 16.2.2 or later to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

An issue has been discovered in GitLab EE affecting all versions from 15.11 prior to 16.2.2 which allows an attacker to spike the resource consumption resulting in DoS.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS