### [CVE-2024-1963](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1963)
![](https://img.shields.io/static/v1?label=Product&message=GitLab&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=8.4%3C%2016.10.7%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-400%3A%20Uncontrolled%20Resource%20Consumption&color=brighgreen)

### Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.4 prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to 17.0.2. A vulnerability in GitLab's Asana integration allowed an attacker to potentially cause a regular expression denial of service by sending specially crafted requests.

### POC

#### Reference
- https://gitlab.com/gitlab-org/gitlab/-/issues/443577

#### Github
No PoCs found on GitHub currently.