CVE-2022-2908
A potential DoS vulnerability was discovered in Gitlab CE/EE versions starting from 10.7 before 15.1.5, all versions starting from 15.2 before 15.2.3,...
Original description
The description as published by the source.
A potential DoS vulnerability was discovered in Gitlab CE/EE versions starting from 10.7 before 15.1.5, all versions starting from 15.2 before 15.2.3, all versions starting from 15.3 before 15.3.1 allowed an attacker to trigger high CPU usage via a special crafted input added in the Commit message field.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"10.7.0"},{"fixed":"15.1.5"},{"introduced":"15.2.0"},{"fixed":"15.2.3"},{"introduced":"15.3.0"},{"fixed":"15.3.1"}]}]
References
- advisory gitlab.com
- advisory gitlab.com
- advisory hackerone.com
- web nvd.nist.gov