NA

CVE-2022-2455

Published: 17/10/2022 Updated: 19/10/2022
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

A business logic issue in the handling of large repositories in all versions of GitLab CE/EE from 10.0 prior to 15.1.6, all versions starting from 15.2 prior to 15.2.4, all versions starting from 15.3 prior to 15.3.2 allowed an authenticated and authorized user to exhaust server resources by importing a malicious project.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

gitlab gitlab