Beveiligingsadvies

CVE-2024-10307

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-03-28 10:02:23
Laatst bijgewerkt 2025-03-28 13:42:16
Toegewezen door GitLab
CVSS-score 4.3
Status PUBLISHED

Beschrijving

An issue has been discovered in GitLab EE/CE affecting all versions from 12.10 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1. A maliciously crafted file can cause uncontrolled CPU consumption when viewing the associated merge request.