VULNERABILITY INTELLIGENCE
CVE-2022-2931
CVSS score7.5 HIGH
EPSS probability1.56%
CISA KEVNot currently listed
Published2022-10-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. Malformed content added to the issue description could have been used to trigger high CPU usage.
Weakness classification
- nvd@nist.gov: CWE-400
Primary references
- cve@gitlab.com — Third Party Advisory
- cve@gitlab.com — Third Party Advisory
- cve@gitlab.com — Permissions Required, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Third Party Advisory
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — Third Party Advisory