CVE-2024-1066
07.02.2024, 22:15
An issue has been discovered in GitLab EE affecting all versions from 13.3.0 prior to 16.6.7, 16.7 prior to 16.7.5, and 16.8 prior to 16.8.2 which allows an attacker to do a resource exhaustion using GraphQL `vulnerabilitiesCountByDay`Enginsight
| Vendor | Product | Version |
|---|---|---|
| gitlab | gitlab | 13.3.0 ≤ 𝑥 < 16.6.7 |
| gitlab | gitlab | 16.7.0 ≤ 𝑥 < 16.7.5 |
| gitlab | gitlab | 16.8.0 ≤ 𝑥 < 16.8.2 |
𝑥
= Vulnerable software versions
Ubuntu Releases