Medium severity4.3NVD Advisory· Published Nov 6, 2023· Updated Jun 17, 2026
CVE-2023-3246
CVE-2023-3246
Description
An issue has been discovered in GitLab EE/CE affecting all versions starting before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1 which allows an attackers to block Sidekiq job processor.
Affected products
7cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: 10.3
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: <16.3.6
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: <16.3.6
- cpe:2.3:a:gitlab:gitlab:16.5.0:*:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:16.5.0:*:*:*:enterprise:*:*:*
- Range: <16.3.6, >=16.4 <16.4.2, >=16.5 <16.5.1
Patches
Vulnerability mechanics
References
2- gitlab.com/gitlab-org/gitlab/-/issues/415371nvdIssue TrackingVendor Advisory
- hackerone.com/reports/2014157nvdPermissions Required
News mentions
1- GitLab Security Release: 16.5.1, 16.4.2, 16.3.6GitLab Security Releases · Oct 31, 2023