5
CVSSv2

CVE-2022-1431

Published: 10/05/2022 Updated: 08/08/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

An issue has been discovered in GitLab affecting all versions starting from 12.10 prior to 14.8.6, all versions starting from 14.9 prior to 14.9.4, all versions starting from 14.10 prior to 14.10.1. GitLab was not correctly handling malicious requests to the PyPi API endpoint allowing the malicious user to cause uncontrolled resource consumption.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

gitlab gitlab 14.10.0

gitlab gitlab

Vendor Advisories

Severity Unknown Remote Unknown Type Unknown Description AVG-2696 gitlab 1410-1 14102-1 High Unknown ...