GitLab EE Denial-of-Service Vulnerability via File Upload

A denial-of-service vulnerability has been identified in GitLab EE, affecting all versions from 11.9 prior to 18.9.7, 18.10 prior to 18.10.6, and 18.11 prior to 18.11.3. The issue arises from improper validation, which could have allowed an unauthenticated user to upload a specially crafted file, leading to service disruption.

Impact

Exploitation of this vulnerability could cause a denial-of-service condition, disrupting normal service operations.

Remediation

Users can upgrade to GitLab versions 18.11.3, 18.10.6, or 18.9.7 to address this vulnerability.