CyberRota Analysis
AI-GeneratedGitLab versions prior to 19.0.5, 19.1.3, and 19.2.1 are vulnerable to a denial of service attack, which could be triggered by an unauthenticated user exploiting insufficient resource throttling in merge request discussions. This vulnerability poses a high risk as it can disrupt service availability, making it critical for all GitLab users, particularly those managing public or high-traffic repositories, to prioritize remediation. Immediate updates to the latest patched versions are strongly recommended to mitigate this risk.
Original NVD Description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.8 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an unauthenticated user to cause a denial of service due to insufficient resource throttling when processing merge request discussions.
Related CVEs
Other vulnerabilities affecting the same vendor(s)