VDB

CVE-2023-6502

CVE-2023-6502 PUBLISHED CVSS 6.5 MEDIUM

A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions before 16.10.6, version 16.11 before 16.11.3, and 17.0 before 17.0.1. It is possible for an attacker to cause a denial of service using a crafted wiki page.

EPSS 0.50% · 41.0th percentile

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.50%
41.0th percentile

Affected Products

VendorProductVersions
Bitnamigitlab0, 16.11.0, 17.0.0
Bitnamigitlab0, 17.0.0, 16.11.0

Timeline

  • Jan 21, 1970 Security Advisory
  • May 21, 2024 CVE Published
  • May 22, 2024 PoC Published
  • May 24, 2024 EPSS Score
  • Jun 18, 2024 EPSS Score
  • Jul 12, 2024 EPSS Score
  • Aug 5, 2024 EPSS Score
  • Sep 23, 2024 EPSS Score
  • Oct 4, 2024 Coalition ESS Score
  • Oct 17, 2024 EPSS Score
  • Nov 10, 2024 EPSS Score
  • Dec 5, 2024 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›