CVE-2023-0121 MEDIUM

CVE-2023-0121: Allocation of Resources Without Limits or Throttling in GitLab

Vendor Gitlab
Product GitLab
Weakness CWE-770 · Uncontrolled resource consumption
Published June 7, 2023
Last update January 7, 2025
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

A denial of service issue was discovered in GitLab CE/EE affecting all versions starting from 13.2.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2 which allows an attacker to cause high resource consumption using malicious test report artifacts.

Key dates

02Disclosure timeline

June 7, 2023 CVE published
January 7, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-6176 Port scanning vulnerability in LG SuperSign CMS CVE-2026-32011 OpenClaw < 2026.3.2 - Slow-Request Denial of Service via Pre-Auth Webhook Body Parsing CVE-2025-32393 AutoGPT has a DoS vulnerability in ReadRSSFeedBlock CVE-2025-32425 AutoGPT has missing Docker log rotation on platform containers that allows host disk-exhaustion DoS CVE-2026-8486 Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation