CVEvulnerability
CVE-2024-9631
7.5 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2025-02-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-407, CWE-770
Description
An issue was discovered in GitLab CE/EE affecting all versions starting from 13.6 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, where viewing diffs of MR with conflicts can be slow.
Affected configurations
• gitlab gitlab (>= 13.6.0 < 17.2.9)
• gitlab gitlab (>= 17.3.0 < 17.3.5)
• gitlab gitlab (>= 17.4.0 < 17.4.2)
Related
References
- https://gitlab.com/gitlab-org/gitlab/-/issues/480867 Exploit, Issue Tracking
- https://hackerone.com/reports/2650086 Permissions Required
- https://gitlab.com/gitlab-org/gitlab/-/issues/480867 Exploit, Issue Tracking