CVSS 3.1 Score 4.3 of 10 (medium)


Published Nov 6, 2023
Updated: Nov 14, 2023
CWE ID 400


CVE-2023-3246 is a vulnerability that affects GitLab EE/CE versions prior to 16.3.6, 16.4.2, and 16.5.1. This vulnerability allows attackers to block the Sidekiq job processor. The vulnerability has a base severity of MEDIUM with a base score of 4.3 according to NVD@NIST, and it requires low privileges and no user interaction for exploitation. The attack vector is through the network, and it has no impact on integrity or confidentiality. The exploitability score is 2.8, indicating a moderate level of difficulty for exploitation. The potential danger this vulnerability poses to an organization is low availability impact with an impact score of 1.4 out of 10.

Remediation for this vulnerability would involve updating GitLab EE/CE to version 16.3.6, 16.4.2, or 16.5.1 or later versions in order to mitigate the risk of the attack vector being exploited in an organization's network infrastructure.

Note: This summary is based solely on the provided information and does not include any additional analysis or context beyond the facts presented in the text provided

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-3246 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options