Related Vulnerabilities: CVE-2021-22166  

An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request with a malformed method. The issue is mitigated in GitLab version 13.7.2.

Severity Medium

Remote Yes

Type Denial of service

Description

An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request with a malformed method. The issue is mitigated in GitLab version 13.7.2.

AVG-1416 gitlab 13.7.1-1 13.7.2-1 Medium Fixed

https://about.gitlab.com/releases/2021/01/07/security-release-gitlab-13-7-2-released/#prometheus-denial-of-service-via-http-request-with-custom-method