CVE-2024-3114

An issue was discovered in GitLab CE/EE affecting all versions starting from 11.10 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2, with the processing logic for parsing invalid commits can lead to a regular expression DoS attack on the server.

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS v3.1

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

EPSS

0.46% chance of exploitation in the next 30 days, 38th percentile

Published

2024-08-08

Updated

2024-08-30

Proof-of-concept exploits (1)

• https://hackerone.com/reports/2416630

References

• CVE Record
• NVD entry

Related

• CVE-2024-3113
• CVE-2024-3115
• CVE-2024-3112
• CVE-2024-31152
• CVE-2024-31114
• CVE-2024-3116