CVE-2024-8973 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2024-8973

Analyzed

More Info Official Page

Source-cve@gitlab.com

Published At-09 May, 2025 | 17:15

Updated At-08 Aug, 2025 | 16:54

An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2. It was possible to cause a DoS condition via GitHub import requests using a malicious crafted payload.

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Primary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CPE Matches

>>gitlab>>Versions from 17.1.0(inclusive) to 17.9.8(exclusive)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*

>>gitlab>>Versions from 17.1.0(inclusive) to 17.9.8(exclusive)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

>>gitlab>>Versions from 17.10.0(inclusive) to 17.10.6(exclusive)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*

>>gitlab>>Versions from 17.10.0(inclusive) to 17.10.6(exclusive)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

>>gitlab>>Versions from 17.11.0(inclusive) to 17.11.2(exclusive)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*

>>gitlab>>Versions from 17.11.0(inclusive) to 17.11.2(exclusive)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-770	Primary	cve@gitlab.com

References

Hyperlink	Source	Resource
https://gitlab.com/gitlab-org/gitlab/-/issues/491041	cve@gitlab.com	Broken Link
https://hackerone.com/reports/2711684	cve@gitlab.com	Permissions Required