CVE-2023-1072: 
GitLab vulnerability analysis and mitigation

A resource depletion vulnerability was discovered in GitLab affecting all versions starting from 9.0 before 15.7.8, all versions starting from 15.8 before 15.8.4, and all versions starting from 15.9 before 15.9.2. The vulnerability, identified as CVE-2023-1072, was related to improper filtering for number of requests to read commits details (GitLab Security Release).

The vulnerability was classified as a medium severity issue with a CVSS score of 4.3 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L). The technical issue stemmed from improper filtering mechanisms for commit detail requests, which could potentially be exploited to trigger resource depletion attacks (GitLab Security Release).

The vulnerability could allow attackers to perform resource depletion attacks against affected GitLab instances, potentially impacting system availability (GitLab Security Release).

GitLab has addressed this vulnerability in versions 15.7.8, 15.8.4, and 15.9.2. Users are strongly recommended to upgrade to these or later versions to mitigate the vulnerability (GitLab Security Release).

The vulnerability was responsibly disclosed by security researcher Nico Jones, and GitLab addressed it through their security release process (GitLab Security Release).