CVE-2024-9631

An issue was discovered in GitLab CE/EE affecting all versions starting from 13.6 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, where viewing diffs of MR with conflicts can be slow.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://gitlab.com/gitlab-org/gitlab/-/issues/480867	Exploit Issue Tracking
https://hackerone.com/reports/2650086	Permissions Required
https://gitlab.com/gitlab-org/gitlab/-/issues/480867	Exploit Issue Tracking

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:gitlab:gitlab:::::community:::*
	cpe:2.3:a:gitlab:gitlab:::::enterprise:::*
	cpe:2.3:a:gitlab:gitlab:::::community:::*
	cpe:2.3:a:gitlab:gitlab:::::enterprise:::*
	cpe:2.3:a:gitlab:gitlab:::::community:::*
	cpe:2.3:a:gitlab:gitlab:::::enterprise:::*

History

06 Aug 2025, 18:54

Type	Values Removed	Values Added
Summary		(es) Se descubrió un problema en GitLab CE/EE que afecta a todas las versiones desde la 13.6 anterior a la 17.2.9, desde la 17.3 anterior a la 17.3.5 y desde la 17.4 anterior a la 17.4.2, donde la visualización de diferencias de MR con conflictos puede ser lenta.
References	~~() https://gitlab.com/gitlab-org/gitlab/-/issues/480867 -~~	() https://gitlab.com/gitlab-org/gitlab/-/issues/480867 - Exploit, Issue Tracking
References	~~() https://hackerone.com/reports/2650086 -~~	() https://hackerone.com/reports/2650086 - Permissions Required
CPE		cpe:2.3:a:gitlab:gitlab:::::community:::* cpe:2.3:a:gitlab:gitlab:::::enterprise:::*
First Time		Gitlab Gitlab gitlab
CWE		CWE-770

05 Feb 2025, 20:15

Type	Values Removed	Values Added
References	~~() https://gitlab.com/gitlab-org/gitlab/-/issues/480867 -~~	() https://gitlab.com/gitlab-org/gitlab/-/issues/480867 -

05 Feb 2025, 11:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-02-05 11:15

Updated : 2025-08-06 18:54

NVD link : CVE-2024-9631

Mitre link : CVE-2024-9631

CVE.ORG link : CVE-2024-9631

JSON object : View

Products Affected

gitlab

gitlab

CWE

CWE-407

Inefficient Algorithmic Complexity

CWE-770

Allocation of Resources Without Limits or Throttling

{"id": "CVE-2024-9631", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "cve@gitlab.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2025-02-05T11:15:17.567", "references": [{"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/480867", "tags": ["Exploit", "Issue Tracking"], "source": "cve@gitlab.com"}, {"url": "https://hackerone.com/reports/2650086", "tags": ["Permissions Required"], "source": "cve@gitlab.com"}, {"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/480867", "tags": ["Exploit", "Issue Tracking"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "cve@gitlab.com", "description": [{"lang": "en", "value": "CWE-407"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-770"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in GitLab CE/EE affecting all versions starting from 13.6 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, where viewing diffs of MR with conflicts can be slow."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en GitLab CE/EE que afecta a todas las versiones desde la 13.6 anterior a la 17.2.9, desde la 17.3 anterior a la 17.3.5 y desde la 17.4 anterior a la 17.4.2, donde la visualizaci\u00f3n de diferencias de MR con conflictos puede ser lenta."}], "lastModified": "2025-08-06T18:54:11.917", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "vulnerable": true, "matchCriteriaId": "FC7B22DA-7D45-4B19-BA35-5A332F375E5B", "versionEndExcluding": "17.2.9", "versionStartIncluding": "13.6.0"}, {"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "9EDFE0A2-EE46-40C2-B8A1-48BDEF464A93", "versionEndExcluding": "17.2.9", "versionStartIncluding": "13.6.0"}, {"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "vulnerable": true, "matchCriteriaId": "EE7140D0-5D8A-4EDA-91AF-5F14BC4F6307", "versionEndExcluding": "17.3.5", "versionStartIncluding": "17.3.0"}, {"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "9A005AE5-1C1A-4515-9695-A502092BB75A", "versionEndExcluding": "17.3.5", "versionStartIncluding": "17.3.0"}, {"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "vulnerable": true, "matchCriteriaId": "7132410B-A160-4C18-8BB6-E53C6A0F35D7", "versionEndExcluding": "17.4.2", "versionStartIncluding": "17.4.0"}, {"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "08991976-707A-4A7B-863D-766928E74FF7", "versionEndExcluding": "17.4.2", "versionStartIncluding": "17.4.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@gitlab.com"}