CVE-2024-9367

Summary

CVE-2024-9367 is a vulnerability affecting GitLab CE/EE versions 13.9 to 17.6.1. An attacker can exploit this issue, which occurs during template parsing for changelog generation, leading to uncontrolled CPU consumption. This could result in a Denial of Service (DoS) condition, making affected GitLab instances unresponsive and inaccessible. Users are advised to update their instances to the latest patched versions to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.