ByteOS Network

NVD Vulnerability Details :

CVE-2024-9631

Analyzed

Source-cve@gitlab.com

Published At-05 Feb, 2025 | 11:15

Updated At-06 Aug, 2025 | 18:54

An issue was discovered in GitLab CE/EE affecting all versions starting from 13.6 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, where viewing diffs of MR with conflicts can be slow.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CPE Matches

GitLab Inc.

>>gitlab>>Versions from 13.6.0(inclusive) to 17.2.9(exclusive)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*

GitLab Inc.

>>gitlab>>Versions from 13.6.0(inclusive) to 17.2.9(exclusive)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

GitLab Inc.

>>gitlab>>Versions from 17.3.0(inclusive) to 17.3.5(exclusive)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*

GitLab Inc.

>>gitlab>>Versions from 17.3.0(inclusive) to 17.3.5(exclusive)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

GitLab Inc.

>>gitlab>>Versions from 17.4.0(inclusive) to 17.4.2(exclusive)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*

GitLab Inc.

>>gitlab>>Versions from 17.4.0(inclusive) to 17.4.2(exclusive)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-407	Secondary	cve@gitlab.com
CWE-770	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://gitlab.com/gitlab-org/gitlab/-/issues/480867	cve@gitlab.com	Exploit Issue Tracking
https://hackerone.com/reports/2650086	cve@gitlab.com	Permissions Required
https://gitlab.com/gitlab-org/gitlab/-/issues/480867	134c704f-9b21-4f2e-91b3-4a467353bcc0	Exploit Issue Tracking

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History