VYPR
Medium severity6.5NVD Advisory· Published Jun 12, 2024· Updated Jun 17, 2026

CVE-2024-1495

CVE-2024-1495

Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.1 prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to 17.0.2. It was possible for an attacker to cause a denial of service using maliciously crafted file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • GitLab Inc./GitLabv54 versions
    cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: 13.1
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=13.1,<16.10.7
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=13.1,<16.10.7
    • (no CPE)range: starting from 13.1 prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to 17.0.2
  • Range: starting from 13.1 prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to 17.0.2
  • osv-coords
    Range: >= 13.1.0, < 16.10.7

Patches

Vulnerability mechanics

References

3

News mentions

1