CVE-2024-5469 LOW

CVE-2024-5469: Uncontrolled Resource Consumption in GitLab

Vendor Gitlab
Product GitLab
Weakness CWE-754
Published June 14, 2024
Last update January 9, 2025
View on NVD All CVEs

CVSS base score

3.1/10
Attack vector Network
Attack complexity High
Privileges required Low
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

DoS in KAS in GitLab CE/EE affecting all versions from 16.10.0 prior to 16.10.6 and 16.11.0 prior to 16.11.3 allows an attacker to crash KAS via crafted gRPC requests.

Key dates

02Disclosure timeline

June 14, 2024 CVE published
January 9, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-8491 Node View Permissions - Moderately critical - Access bypass - SA-CONTRIB-2026-034 CVE-2025-69250 free5GC has Improper Error Handling in UDM, Leading to Information Exposure CVE-2022-20804 Cisco Unified Communications Products Denial of Service Vulnerability CVE-2024-30384 Junos OS: EX4300 Series: If a specific CLI command is issued PFE crashes will occur CVE-2026-40249 free5gc UDR fail-open request handling in PolicyDataSubsToNotifySubsIdPut may allow unintended subscription updates after input errors