CVE-2024-9631
EUVD-2024-5044005.02.2025, 11:15
An issue was discovered in GitLab CE/EE affecting all versions starting from 13.6 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, where viewing diffs of MR with conflicts can be slow.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| gitlab | gitlab | 13.6.0 ≤ 𝑥 < 17.2.9 |
| gitlab | gitlab | 13.6.0 ≤ 𝑥 < 17.2.9 |
| gitlab | gitlab | 17.3.0 ≤ 𝑥 < 17.3.5 |
| gitlab | gitlab | 17.3.0 ≤ 𝑥 < 17.3.5 |
| gitlab | gitlab | 17.4.0 ≤ 𝑥 < 17.4.2 |
| gitlab | gitlab | 17.4.0 ≤ 𝑥 < 17.4.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-407 - Inefficient Algorithmic ComplexityAn algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached.
- CWE-770 - Allocation of Resources Without Limits or ThrottlingThe software allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.