GitLab CE/EE Denial-of-Service Vulnerability in HTTP Response Processing

A denial-of-service vulnerability has been addressed in GitLab CE/EE versions 8.3 prior to 18.4.5, 18.5 prior to 18.5.3, and 18.6 prior to 18.6.1. This vulnerability allowed an authenticated user with specific permissions to create a denial-of-service condition by manipulating HTTP response processing.

Impact

Exploitation of this vulnerability could lead to a denial-of-service condition, causing the application to become unresponsive or unavailable.