HTTP: GitLab Community and Enterprise Edition Gollum Link Regex Denial of Service
This signature detects attempts to exploit a known vulnerability against GitLab Community and Enterprise Edition. A successful attack can result in a denial-of-service condition.
Extended Description
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.1.7, starting from 17.2 prior to 17.2.5, starting from 17.3 prior to 17.3.2 which could cause Denial of Service via sending a specific POST request.
Affected Products
Gitlab gitlab
Short Name
HTTP:DOS:GITLAB-GOLLUM-REGEX
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2023-6502 CVE-2024-8124 Community Denial Edition Enterprise GitLab Gollum Link Regex Service and of
Release Date
09/10/2024
Supported Platforms
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vsrx-19.2
srx-19.3
Sigpack Version
3764
False Positive
Unknown
Vendors
Gitlab