Unrated severityNVD Advisory· Published Nov 6, 2023· Updated Nov 20, 2025
Allocation of Resources Without Limits or Throttling in GitLab
CVE-2023-3246
Description
An issue has been discovered in GitLab EE/CE affecting all versions starting before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1 which allows an attackers to block Sidekiq job processor.
Affected products
3cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: 10.3
- (no CPE)range: <16.3.6, >=16.4 <16.4.2, >=16.5 <16.5.1
Patches
Vulnerability mechanics
References
2- hackerone.com/reports/2014157mitretechnical-descriptionexploitpermissions-required
- gitlab.com/gitlab-org/gitlab/-/issues/415371mitreissue-tracking
News mentions
1- GitLab Security Release: 16.5.1, 16.4.2, 16.3.6GitLab Security Releases · Oct 31, 2023