MEDIUM

CVE-2022-3279

Gitlab GitLab 2022-10-17 CVSS v3.1

CVSS

6.5

Description

An unhandled exception in job log parsing in GitLab CE/EE affecting all versions prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows an attacker to prevent access to job logs

Summary dbcve.org

An unhandled exception in job log parsing in GitLab CE/EE allows an attacker to trigger a denial of service by causing the parsing to fail, preventing legitimate users from accessing job logs.

Mitigation

Upgrade GitLab to version 15.2.5, 15.3.4, 15.4.1 or later to patch the unhandled exception in job log parsing.

Weakness (CWE)

CWE-755

EPSS Score

1.02%

Probability of exploitation in next 30 days

61.8th percentile

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3279.json Vendor Advisory https://gitlab.com/gitlab-org/gitlab/-/issues/364249 Broken Link, Vendor Advisory https://hackerone.com/reports/1587261 Permissions Required, Third Party Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE