Executive Summary

This vulnerability in GitLab Enterprise Edition affects versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3. It allows an authenticated user to cause a denial of service (DoS) on the GitLab instance. The issue arises due to improper input validation in GraphQL queries.

Useful 0 Not Useful 0

Impact Analysis

An attacker who is authenticated on the GitLab instance could exploit this vulnerability to cause a denial of service, making the GitLab service unavailable or unstable. This could disrupt development workflows and access to repositories and related services.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, you should upgrade your GitLab EE instance to a fixed version. Specifically, update to version 18.8.9 or later if you are on the 18.8 branch, 18.9.5 or later if on the 18.9 branch, or 18.10.3 or later if on the 18.10 branch.

Useful 0 Not Useful 0