VYPR
← All advisories
Medium severity6.5NVD Advisory· Published May 14, 2024· Updated Jun 17, 2026

CVE-2024-2651

CVE-2024-2651

Description

An issue has been discovered in GitLab CE/EE affecting all versions before 16.9.7, all versions starting from 16.10 before 16.10.5, all versions starting from 16.11 before 16.11.2. It was possible for an attacker to cause a denial of service using maliciously crafted markdown content.

Affected products

5
  • osv-coords
    pkg:bitnami/gitlab
    Range: < 16.9.7
  • GitLab Inc./GitLabllm-fuzzy4 versions
    <16.9.7, >=16.10 <16.10.5, >=16.11 <16.11.2+ 3 more
    • (no CPE)range: <16.9.7, >=16.10 <16.10.5, >=16.11 <16.11.2
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: <16.9.7
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: <16.9.7
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: 0.0

Patches

Vulnerability mechanics

References

2

News mentions

1