CVEvulnerability
CVE-2023-3246
4.3 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2023-11-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
- Weaknesses
- CWE-770
Description
An issue has been discovered in GitLab EE/CE affecting all versions starting before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1 which allows an attackers to block Sidekiq job processor.
Affected configurations
• gitlab gitlab (< 16.3.6)
• gitlab gitlab (>= 16.4.0 < 16.4.2)
• gitlab gitlab 16.5.0
Related
Weakness · CWE (1)
- CWE-770 Allocation of Resources Without Limits or Throttling weakness
References
- https://gitlab.com/gitlab-org/gitlab/-/issues/415371 Issue Tracking, Vendor Advisory
- https://hackerone.com/reports/2014157 Permissions Required
- https://gitlab.com/gitlab-org/gitlab/-/issues/415371 Issue Tracking, Vendor Advisory
- https://hackerone.com/reports/2014157 Permissions Required