CVE-2022-3283

2022-10-1700:00:00

ubuntu.com

gitlab

dos vulnerability

cpu usage

unix

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

43.9%

JSON

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all
versions before before 15.2.5, all versions starting from 15.3 before
15.3.4, all versions starting from 15.4 before 15.4.1 While cloning an
issue with special crafted content added to the description could have been
used to trigger high CPU usage.