CVE-2023-0121

Summary

CVE-2023-0121 is a denial-of-service vulnerability affecting multiple versions of GitLab CE and EE. Specifically, all versions of GitLab starting from 13.2.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, and all versions starting from 16.0 before 16.0.2 are vulnerable. An attacker can exploit this issue by supplying malicious test report artifacts, resulting in high resource consumption and a denial-of-service condition. This vulnerability poses a significant risk to GitLab users and requires prompt patching to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.