CVE-2024-2818
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Summary
CVE-2024-2818 is a vulnerability found in GitLab CE/EE versions before 16.8.5, 16.9.x before 16.9.3, and 16.10.x before 16.10.1, which allows an attacker to launch a denial of service attack by exploiting a malicious crafted description parameter for labels. The risk score assigned to this vulnerability is 5, indicating a medium severity level. The exploitability score is 2.8, and the base score is 4.3 according to the CVSS v3.1 scoring system. The privileges required for the attack are low and there is no user interaction needed, making it more dangerous as it can be remotely exploited over a network without user involvement. However, the impact on integrity and confidentiality is none, but availability may be affected to some extent as it has a low availability impact rating of LOW. It is recommended to remediate this vulnerability by updating GitLab CE/EE to versions 16.8.5, 16.9.3, or 16.10.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions