CVE-2023-3917

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Sep 29, 2023
Updated: Oct 3, 2023
CWE ID 20

Summary

CVE-2023-3917 is a vulnerability that affects all versions of Gitlab EE and CE prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. It is categorized as CWE-20 (Improper Input Validation). The vulnerability allows an attacker to cause denial of service in pipelines, resulting in their failure. The base severity of this vulnerability is rated as HIGH with a base score of 7.5 according to NIST's scoring system. The exploitability score is 3.9, indicating a moderate level of difficulty for exploitation. The attack vector is through the network, and no privileges are required for exploitation. There is no user interaction necessary for the exploit, and it does not impact integrity or confidentiality but has a high availability impact on affected systems.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-3917 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options