TI-2024-05868 Aliases CVE-2024-6324 GHSA-3c89-47f8-w5c6

Inefficient Algorithmic Complexity in GitLab

LOW 21CWE-407Published 2025-01-09 · Updated 2025-01-09

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · Low
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-407.

Summary

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. It was possible to trigger a DoS by creating cyclic references between epics.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00714 53rd percentileScored 2026-11-07

Public exploit Yes 2 exploit referencesTagged by NVD and the CNA

Fix Fixed GitLab (GitLab): 17.7.1, 17.6.3, 17.5.5

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
GitLab	GitLab	17.7 to before 17.7.1; 17.6 to before 17.6.3; 15.7 to before 17.5.5	17.7.1, 17.6.3, 17.5.5	Patch available	CNA

GitLab VendorGitLab Affected 17.7 to before 17.7.1; 17.6 to before 17.6.3; 15.7 to before 17.5.5 Fixed in 17.7.1, 17.6.3, 17.5.5 Patch available CNA

CPE configurations NVD · 6

CPE	Versions	Role	Vendor
cpe:2.3:a:gitlab:gitlab:::::community:::*	15.7.0 to before 17.5.5	Vulnerable	GitLab
cpe:2.3:a:gitlab:gitlab:::::enterprise:::*	15.7.0 to before 17.5.5	Vulnerable	GitLab
cpe:2.3:a:gitlab:gitlab:::::community:::*	17.6.0 to before 17.6.3	Vulnerable	GitLab
cpe:2.3:a:gitlab:gitlab:::::enterprise:::*	17.6.0 to before 17.6.3	Vulnerable	GitLab
cpe:2.3:a:gitlab:gitlab:::::community:::*	17.7.0 to before 17.7.1	Vulnerable	GitLab
cpe:2.3:a:gitlab:gitlab:::::enterprise:::*	17.7.0 to before 17.7.1	Vulnerable	GitLab

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:* Versions 15.7.0 to before 17.5.5 Vulnerable ·GitLab
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* Versions 15.7.0 to before 17.5.5 Vulnerable ·GitLab
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:* Versions 17.6.0 to before 17.6.3 Vulnerable ·GitLab
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* Versions 17.6.0 to before 17.6.3 Vulnerable ·GitLab
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:* Versions 17.7.0 to before 17.7.1 Vulnerable ·GitLab
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* Versions 17.7.0 to before 17.7.1 Vulnerable ·GitLab

Remediation

Fix · CNA GitLab (GitLab) Fixed in 17.7.1, 17.6.3, 17.5.5

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Release · 2025-01-09
GitLab 17.5.5, 17.6.3, 17.7.1
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2024-12089 Incorrect User Management in GitLabPriority LOW 24
Show all 2 records →

Timeline

2026-10-02 Threatist record created from CVE-2024-6324
2026-10-03 Alias added: GHSA-3c89-47f8-w5c6

References

Exploit 2

Advisory 1

https://about.gitlab.com/releases/2025/01/08/patch-release-gitlab-17-7-1-released/#cyclic-reference-of-epics-leads-resource-exhaustion

TI-2026-71508 Integer overflow in GitLab allows code execution on the server KEVCVSS 3.1CRITICAL 10.0
TI-2026-58817 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab KEVCVSS 3.1CRITICAL 10.0
TI-2023-06425 Weak Password Recovery Mechanism for Forgotten Password in GitLab KEVCVSS 3.1CRITICAL 10.0
TI-2021-05191 Code injection in GitLab KEVCVSS 3.1CRITICAL 10.0
TI-2021-05161 Server-side request forgery in GitLab KEVCVSS 3.1CRITICAL 9.8
TI-2022-02763 Injection in GitLab CVSS 3.1CRITICAL 9.9

See all 1506 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences