CVE-2022-3818

2022-11-1000:00:00

ubuntu.com

gitlab

resource consumption

denial of service

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS

0.001

Percentile

36.8%

JSON

An uncontrolled resource consumption issue when parsing URLs in GitLab
CE/EE affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and
15.5 prior to 15.5.2 allows an attacker to cause performance issues and
potentially a denial of service on the GitLab instance.