Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2023-6386

Date: February 5, 2025

A denial of service vulnerability was identified in GitLab CE/EE, affecting all versions from 15.11 prior to 16.6.7, 16.7 prior to 16.7.5 and 16.8 prior to 16.8.2 which allows an attacker to spike the GitLab instance resource usage resulting in service degradation.

Language: Ruby

Severity Score

Related Resources (6)

https://about.gitlab.com/releases/2024/02/07/security-release-gitlab-16-8-2-released/#redos-in-ci/cd-pipeline-editor-while-verifying-pipeline-syntax
https://hackerone.com/reports/2261581
https://gitlab.com/gitlab-org/gitlab/-/issues/433147
https://nvd.nist.gov/vuln/detail/CVE-2023-6386
https://gitlab.com/gitlab-org/gitlab/-/commit/67df0d1733012b28ed2ce2837d14171ccf1b0db1
https://www.mend.io/vulnerability-database/CVE-2023-6386

Severity Score

Weakness Type (CWE)

Allocation of Resources Without Limits or Throttling

CWE-770

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): HIGH

Do you need more information?

Contact Us