What’s Vulnerable › Vulnerabilities

CVE-2023-4011: Allocation of Resources Without Limits or Throttling in GitLab

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-08-02 · updated 2026-06-17
• Weakness: CWE-770

Description

An issue has been discovered in GitLab EE affecting all versions from 15.11 prior to 16.2.2 which allows an attacker to spike the resource consumption resulting in DoS.

Affected products

• GitLab: from 15.11 before 16.2.2 — fixed in 16.2.2

How to fix

Upgrade to a fixed version: GitLab 16.2.2. Check the vendor advisory for mitigations.

References

• https://gitlab.com/gitlab-org/gitlab/-/issues/409367
• https://gitlab.com/gitlab-org/gitlab/-/issues/409367

Get alerted when CVE-2023-4011 or the next vulnerability affects your stack