BIT-gitlab-2022-2931

vendorUSosv

view advisory published 2024-03-06Licence: per source

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. Malformed content added to the issue description could have been used to trigger high CPU usage.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-2931US	high7.5	1.56% (75th)	—	2022-10-17
A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 be…

references

External citations — patches, advisories, analysis.

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2931.jsonADVISORY
https://gitlab.com/gitlab-org/gitlab/-/issues/361982ADVISORY
https://hackerone.com/reports/1543718ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2022-2931WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan