CVE-2024-5423

Summary

CVE-2024-5423 is a recently disclosed Denial of Service (DoS) vulnerability affecting multiple versions of GitLab CE/EE. Versions starting from 1.0 up to 17.0.6, as well as 17.1 up to 17.1.4, and 17.2 up to 17.2.2 are reportedly vulnerable. An attacker can exploit this issue by causing resource exhaustion through the Banzai pipeline, resulting in service disruption. GitLab urges users to upgrade to the patched versions as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.