CVE-2022-2592
Description
A lack of length validation in Snippet descriptions in GitLab CE/EE affecting all versions prior to 15.1.6, 15.2 prior to 15.2.4 and 15.3 prior to 15.3.2 allows an authenticated attacker to create a maliciously large Snippet which when requested with or without authentication places excessive load on the server, potential leading to Denial of Service.
Summary dbcve.org
This is a denial of service vulnerability in GitLab CE/EE where missing length validation on Snippet descriptions allows an authenticated attacker to create an excessively large Snippet. When this malicious Snippet is accessed (with or without authentication), it causes excessive server load, potentially leading to service unavailability.
Mitigation
Upgrade GitLab to version 15.1.6, 15.2.4, 15.3.2 or later to obtain the patch that adds proper length validation to Snippet descriptions.