Description
An issue has been discovered in GitLab EE affecting all versions before 16.8.6, all versions starting from 16.9 before 16.9.4, all versions starting from 16.10 before 16.10.2. It was possible for an attacker to cause a denial of service using malicious crafted content in a junit test report file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GitLab | GitLab | < 16.8.6, 16.9 – < 16.9.4, 16.10 – < 16.10.2 | 16.8.6 |
Advisories 1
- WID-SEC-2024-0849 GitLab: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 10, 2024
References
- GitLab Issue #434689 issue-tracking permissions-required
- HackerOne Bug Bounty Report #2268037 technical-description exploit permissions-required