BIT-gitlab-2022-3283

vendorUSosv

view advisory published 2024-03-06Licence: per source

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 While cloning an issue with special crafted content added to the description could have been used to trigger high CPU usage.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-3283US	high7.5	1.74% (78th)	—	2022-10-17
A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from…

references

External citations — patches, advisories, analysis.

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3283.jsonADVISORY
https://gitlab.com/gitlab-org/gitlab/-/issues/361982ADVISORY
https://hackerone.com/reports/1543718ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2022-3283WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan