HIGH

CVE-2022-3283

Gitlab GitLab 2022-10-17 CVSS v3.1

CVSS

7.5

Description

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 While cloning an issue with special crafted content added to the description could have been used to trigger high CPU usage.

Weakness (CWE)

CWE-400 Uncontrolled Resource Consumption

EPSS Score

1.42%

Probability of exploitation in next 30 days

71.6th percentile

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3283.json Vendor Advisory https://gitlab.com/gitlab-org/gitlab/-/issues/361982 Exploit, Issue Tracking, Vendor Advisory https://hackerone.com/reports/1543718 Permissions Required, Third Party Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE