VDB

CVE-2024-8233

CVE-2024-8233 PUBLISHED

An issue has been discovered in GitLab CE/EE affecting all versions from 9.4 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. An attacker could cause a denial of service with requests for diff files on a commit or merge request.

EPSS 1.20% · 79.2th percentile

Risk Scores

EPSS Score
1.20%
79.2th percentile

Affected Products

VendorProductVersions
Bitnamigitlab9.4.0, 17.5.0, 17.6.0
Bitnamigitlab9.4.0, 17.5.0, 17.6.0

Timeline

  • Jan 21, 1970 Security Advisory
  • Dec 10, 2024 CVE Published
  • Dec 11, 2024 PoC Published
  • Dec 12, 2024 PoC Published
  • Dec 13, 2024 EPSS Score
  • Dec 30, 2024 EPSS Score
  • Jan 15, 2025 EPSS Score
  • Feb 1, 2025 EPSS Score
  • Mar 6, 2025 EPSS Score
  • Mar 23, 2025 EPSS Score
  • Apr 1, 2025 Coalition ESS Score
  • Apr 8, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›