VYPR
← All advisories
High severity7.5NVD Advisory· Published Apr 25, 2024· Updated Jun 17, 2026

CVE-2024-2829

CVE-2024-2829

Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.5 before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1. A crafted wildcard filter in FileFinder may lead to a denial of service.

Affected products

7
  • GitLab Inc./GitLab5 versions
    cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 4 more
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=12.5.0,<16.9.6
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=12.5.0,<16.9.6
    • cpe:2.3:a:gitlab:gitlab:16.11.0:*:*:*:community:*:*:*
    • cpe:2.3:a:gitlab:gitlab:16.11.0:*:*:*:enterprise:*:*:*
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: 12.5
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 12.5.0, < 16.9.6
  • GitLab Inc./GitLab EE and CEllm-fuzzy
    Range: starting from 12.5 before 16.9.6, starting from 16.10 before 16.10.4, starting from 16.11 before 16.11.1

Patches

Vulnerability mechanics

References

2

News mentions

1