VULNERABILITY INTELLIGENCE
CVE-2022-0151
CVSS score6.5 MEDIUM
EPSS probability1.12%
CISA KEVNot currently listed
Published2022-01-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Description
An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 before 14.6.2. GitLab was not correctly handling requests to delete existing packages which could result in a Denial of Service under specific conditions.
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- cve@gitlab.com — Third Party Advisory
- cve@gitlab.com — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link